ownCloud Permissions Privileges and Access Controls Vulnerability - CVE-2013-1963 - Vulnerability Database

ownCloud Permissions Privileges and Access Controls Vulnerability - CVE-2013-1963

Medium
Reference: CVE-2013-1963
Title: ownCloud Permissions Privileges and Access Controls Vulnerability
Overview:

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts which allows remote authenticated users to download arbitrary contacts via unspecified vectors.