CVE-2012-4752

Published September 5th, 2012

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

appconfig.php in ownCloud before 4.0.6 does not properly restrict access, which allows remote authenticated users to edit app configurations via unspecified vectors. NOTE: this can be leveraged by unauthenticated remote attackers using CVE-2012-4393.

owncloud/core

:cloud: ownCloud web server core (Files, DAV, etc.)

GitHub

8.79K