VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2020-28644

CVE-2020-28644

Description

The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • OwnCloud/Owncloud2 versions
    cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*range: <10.6.0
    • (no CPE)range: <10.6
  • ownCloud/coredescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.