CVE-2014-9041

Name of the Vulnerable Software and Affected Versions ownCloud server versions prior to 5.0.18 ownCloud server versions 6.x prior to 6.0.6 ownCloud server versions 7.x prior to 7.0.3

Description The issue concerns the import functionality in the bookmarks application, which fails to validate CSRF tokens. This allows remote attackers to conduct CSRF attacks.

Recommendations For ownCloud server versions prior to 5.0.18, update to version 5.0.18 or later. For ownCloud server versions 6.x prior to 6.0.6, update to version 6.0.6 or later. For ownCloud server versions 7.x prior to 7.0.3, update to version 7.0.3 or later.