Description

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Remediation

References

CVE-2013-1963

Related Vulnerabilities

WordPress Plugin FancyBox for WordPress Security Bypass (3.0.2)

WordPress Plugin GistPress Cross-Site Scripting (3.0.1)

WordPress Plugin Hide My WP Cross-Site Scripting (4.51.1)

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2021-32476)

WordPress Plugin Download Plugin Security Bypass (1.6.0)

Severity

Medium

Classification

CVE-2013-1963 CWE-264

Tags

Missing Update Known Vulnerabilities