CVE-2013-2048

no score yetEPSS 1.7%

ownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-03-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

owncloud:owncloud
owncloud:owncloud_server

References

http://owncloud.org/about/security/advisories/oC-SA-2013-025/
http://owncloud.org/about/security/advisories/oC-SA-2013-025/

Check your stack JSON