apps.owncloud.com: Referer protection Bypassed

Summary

@herlove has reported a vulnerability within the appstore at apps.owncloud.com allowing an adversary to bypass the HTTP referer based CSRF protection. This issue was caused by an insufficient regular expression which has been patched meanwhile.

On request of the reporter this issue has been disclosed limited and not public.

i reported a vulnerability in which attacker was able to bypass referer protection which is commonly used for protecting users from CSRF attacks. This happened due to weak regular expression.