CVE-2013-2086

The configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF tokens and other sensitive information by reading an unspecified JavaScript file.

Date published : 2014-03-14

http://owncloud.org/about/security/advisories/oC-SA-2013-027/