CVE-2013-1963

Publication date

2014-03-14 16:00:00

Family

redhat

State

PUBLISHED

Description

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.