Description

The document application in ownCloud Server before 6.0.3 uses sequential values for the file_id, which allows remote authenticated users to enumerate shared files via unspecified vectors.

Remediation

References

CVE-2014-3837

Related Vulnerabilities

Oracle HTTP Server Other Vulnerability (CVE-2002-0656)

PHP Other Vulnerability (CVE-2007-1379)

WordPress Plugin Easy Property Listings Cross-Site Request Forgery (3.3.5.8)

axios Uncontrolled Resource Consumption Vulnerability (CVE-2021-3749)

WordPress Plugin Stetic Cross-Site Request Forgery (1.0.6)

Severity

Medium

Classification

CVE-2014-3837 CWE-264

Tags

Missing Update Known Vulnerabilities