ownCloud · Report #84395
CSRF in apps.owncloud.com
Validstatus
3upvotes
10 Mar 2016disclosed
How it was found
Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility (CSRF ) , which is found in the website of your website (apps.owncloud.com).
this bug allow to hackers takeover of user accounts
POC : https://www.youtube.com/watch?v=6YnjPoiutfA
For more information :
https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)