CVE-2014-3836

no score yetEPSS 0.6%

owncloud: no CVSS score yet. EPSS 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud Server before 6.0.3 allow remote attackers to hijack the authentication of users for requests that (1) conduct cross-site scripting (XSS) attacks, (2) modify files, or (3) rename files via unspecified vectors.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-06-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

owncloud:owncloud
owncloud:owncloud_server

References

http://owncloud.org/about/security/advisories/oc-sa-2014-014/
http://owncloud.org/about/security/advisories/oc-sa-2014-014/

Check your stack JSON