Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-4392
7.5
HIGHCVSS v2
Published
September 5, 2012
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
index.php in ownCloud 4.0.7 does not properly validate the oc_token cookie, which allows remote attackers to bypass authentication via a crafted oc_token cookie value.
GitHub