CVE-2013-2048: CSRF
ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2048?
CVE-2013-2048 is classified as a medium severity vulnerability due to its potential for remote authenticated users to execute arbitrary API commands.
How do I fix CVE-2013-2048?
To fix CVE-2013-2048, you should upgrade ownCloud to version 5.0.6 or later to ensure proper permission checks.
Who is affected by CVE-2013-2048?
CVE-2013-2048 affects all versions of ownCloud prior to 5.0.6.
What type of attack does CVE-2013-2048 allow?
CVE-2013-2048 can allow remote authenticated users to execute arbitrary API commands by leveraging improper permission checks.
Can CVE-2013-2048 be exploited using CSRF?
Yes, CVE-2013-2048 can be leveraged using CSRF (Cross-Site Request Forgery) to facilitate unauthorized API command execution.