CVE-2013-1963

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 4.5.10 ownCloud versions 5.x prior to 5.0.5

Description The contacts application in ownCloud does not properly check the ownership of contacts. This allows remote authenticated users to download arbitrary contacts via unspecified vectors.

Recommendations For ownCloud versions prior to 4.5.10, update to version 4.5.10 or later. For ownCloud versions 5.x prior to 5.0.5, update to version 5.0.5 or later.