Beveiligingsadvies

CVE-2015-6670

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-10-26 14:00:00
Laatst bijgewerkt 2024-08-06 07:29:24
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.