HexBrain

ownCloud · Report #85565

apps.owncloud.com: CSRF change privacy settings

Validstatus
1upvotes
11 Mar 2016disclosed

How it was found

Hello owncloud security team , I am a researcher of security, wanted to reveal a security vulnerability responsibility (CSRF ) , which is found in the website of your website (apps.owncloud.com).

this bug allow to me to change privacy settings .

POC :

https://www.youtube.com/watch?v=jDllgJ2wWOA

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original