CVE-2013-0304

ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid…

published June 5, 2014

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to /apps/calendar/export.php. NOTE: this issue has been reported as a cross-site request forgery (CSRF) vulnerability, but due to lack of details, it is uncertain what the root cause is.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01000 · 62.5th percentile
Published
2014-06-05T15:00Z
EPSS history
Timeline
  • 05 JUN 15:00Z
    ownCloud Server before 4.5.7 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid…
    cvelistv5