medium4.3
CVE-2020-28644
The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints.
Impact
The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owncloud | Owncloud | before 10.6.0 |