CVE Vulnerabilities

CVE-2013-1963

Published: Mar 14, 2014 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io minimus.io echohq.com

The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Owncloud Owncloud * 4.5.9 (including)
Owncloud_server Owncloud 4.5.0 (including) 4.5.0 (including)
Owncloud_server Owncloud 4.5.1 (including) 4.5.1 (including)
Owncloud_server Owncloud 4.5.2 (including) 4.5.2 (including)
Owncloud_server Owncloud 4.5.3 (including) 4.5.3 (including)
Owncloud_server Owncloud 4.5.4 (including) 4.5.4 (including)
Owncloud_server Owncloud 4.5.5 (including) 4.5.5 (including)
Owncloud_server Owncloud 4.5.6 (including) 4.5.6 (including)
Owncloud_server Owncloud 4.5.7 (including) 4.5.7 (including)
Owncloud_server Owncloud 4.5.8 (including) 4.5.8 (including)
Owncloud_server Owncloud 5.0.0 (including) 5.0.0 (including)
Owncloud_server Owncloud 5.0.1 (including) 5.0.1 (including)
Owncloud_server Owncloud 5.0.2 (including) 5.0.2 (including)
Owncloud_server Owncloud 5.0.3 (including) 5.0.3 (including)
Owncloud_server Owncloud 5.0.4 (including) 5.0.4 (including)
Owncloud Ubuntu raring *
Owncloud Ubuntu upstream *

References