CVE-2012-4753: CSRF
Published Sep 5, 2012
·Updated
Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.5 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Affected Software
17 affected components
ownCloud ownCloud<=4.0.4
ownCloud ownCloud=3.0.0
ownCloud ownCloud=3.0.1
ownCloud ownCloud=3.0.2
ownCloud ownCloud=3.0.3
ownCloud ownCloud=4.0.0
ownCloud ownCloud=4.0.1
ownCloud ownCloud=4.0.2
ownCloud ownCloud=4.0.3
ownCloud ownCloud Server=3.0.0
ownCloud ownCloud Server=3.0.1
ownCloud ownCloud Server=3.0.2
ownCloud ownCloud Server=3.0.3
ownCloud ownCloud Server=4.0.0
ownCloud ownCloud Server=4.0.1
ownCloud ownCloud Server=4.0.2
ownCloud ownCloud Server=4.0.3
Event History
Sep 5, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4753?
CVE-2012-4753 is classified as a high severity vulnerability due to its potential for authentication hijacking.
2
How do I fix CVE-2012-4753?
To fix CVE-2012-4753, you should upgrade your ownCloud installation to version 4.0.5 or later.
3
What types of vulnerabilities does CVE-2012-4753 include?
CVE-2012-4753 includes multiple cross-site request forgery (CSRF) vulnerabilities.
4
Which versions of ownCloud are affected by CVE-2012-4753?
CVE-2012-4753 affects ownCloud versions up to 4.0.4 and specific earlier versions such as 3.0.0 to 3.0.3.
5
What are the consequences of an exploit using CVE-2012-4753?
Exploiting CVE-2012-4753 can allow remote attackers to hijack the authentication of users, compromising sensitive data.