CVE-2013-2048 Information

Description

ownCloud before 5.0.6 does not properly check permissions which allows remote authenticated users to execute arbitrary API commands via unspecified vectors. NOTE: this can be leveraged using CSRF to allow remote attackers to execute arbitrary API commands.

Reference

http://owncloud.org/about/security/advisories/oC-SA-2013-025/