CVE-2020-28644

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints

published February 9, 2021

CVSS
—
EPSS
0%
Percentile
39.0
In the wild
Unconfirmed
What it is

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00461 · 39.0th percentile
Published
2021-02-09T18:18Z
EPSS history
Timeline
  • 09 FEB 18:18Z
    The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints
    cvelistv5