HexBrain

ownCloud · Report #84395

CSRF in apps.owncloud.com

Validstatus
3upvotes
10 Mar 2016disclosed

How it was found

Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility (CSRF ) , which is found in the website of your website (apps.owncloud.com).

this bug allow to hackers takeover of user accounts

POC : https://www.youtube.com/watch?v=6YnjPoiutfA

For more information :

https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original