Security Advisory

CVE-2013-2043

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2014-03-14 16:00:00

Last updated 2024-08-06 15:20:37

Assigner redhat

State PUBLISHED

Description

apps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly check the ownership of a calendar, which allows remote authenticated users to download arbitrary calendars via the calendar_id parameter.

← Browse all CVEs View on cve.org ↗