CVE

Id
83947  
CVE No.
CVE-2015-6670  
Status
Candidate  
Description
ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote authenticated users to read arbitrary calendars via the calid parameter to apps/calendar/export.php.  
Phase
Assigned (20150825)  
Votes
None (candidate not yet proposed)  
Comments