Share:

CVE-2020-28644 - Owncloud Owncloud

February 10, 2021

Moderate 4.3

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

Affected software

Owncloud Owncloud

Reference links

https://owncloud.com/security-advisories/cross-site-request-forgery-in-the-ocs-api/

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.