VULNERABILITY INTELLIGENCE

CVE-2014-9041

CVSS score6.8 MEDIUM
EPSS probability0.83%
CISA KEVNot currently listed
Published2015-02-04
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which allow remote attackers to conduct CSRF attacks.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references