Vulnerabilitycritical

Critical ownCloud flaw under attack (CVE-2023-49103)

Help Net Securityby @zeljkazorzNov 28, 2023 · 00:00 UTC (Nov 28, 2023)2 min read4 · 2 reads

Read at helpnetsecurity.com

Analyze CVE-2023-49103 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-49103 CVE-2023-49104 CVE-2023-49105

Tags: cve-2023-49103 cve-2023-49104 cve-2023-49105 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-49103	Unauthenticated phpinfo credential leak in ownCloud graphapi	7.5	78%	KEV	Nov 21, 2023 KEV Nov 30, 2023
CVE-2023-49104	An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled	6.1	<1%		Nov 21, 2023
CVE-2023-49105	Improper Authentication in ownCloud Server Allows Unauthenticated File Access	9.8	43%	KEV	Nov 21, 2023 KEV Aug 27, 2026

From the original article

2 min read at helpnetsecurity.com

Attackers are trying to exploit a critical information disclosure vulnerability (CVE-2023-49103) in ownCloud, a popular file sharing and collaboration platform used in enterprise settings. Greynoise and SANS ISC say attemps have been first spotted over the weekend, though Dr.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.