Hackers Exploit Critical Vulnerability in ownCloud
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-49104 | An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled | 6.1 | <1% | ||
| CVE-2023-49105 | Improper Authentication in ownCloud Server Allows Unauthenticated File Access | 9.8 | 43% | KEV | KEV |
From the original article
1 min read at infosecurity-magazine.com
Security experts have urged ownCloud customers to mitigate a critical zero-day vulnerability in its “graphapi” app announced last week, after observing mass exploitation by threat actors. Security vendor GreyNoise raised the alarm after file server and collaboration platform ownCloud revealed the CVSS 10. 0-rated vulnerability on November 21.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.