CVE-2012-2397

Name of the Vulnerable Software and Affected Versions ownCloud versions prior to 3.0.3

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences. This is achieved through vectors involving contacts.

Recommendations For versions prior to 3.0.3, update to version 3.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to contact-related functionality until the update is applied.