ownCloud Permissions Privileges and Access Controls Vulnerability - CVE-2013-2048 - Vulnerability Database

ownCloud Permissions Privileges and Access Controls Vulnerability - CVE-2013-2048

Medium
Reference: CVE-2013-2048
Title: ownCloud Permissions Privileges and Access Controls Vulnerability
Overview:

ownCloud before 5.0.6 does not properly check permissions which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.