ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-49103 | Unauthenticated phpinfo credential leak in ownCloud graphapi | 7.5 | 78% | KEV | KEV |
| CVE-2023-4966 | Info-Disclosure Buffer Overflow (CitrixBleed) in Citrix NetScaler ADC/Gateway | 7.5 | 100% | KEVRansomware | KEV |
From the original article
4 min read at arstechnica.com
Easy-to-exploit flaw gives hackers passwords and cryptographic keys to vulnerable servers. Security researchers are tracking what they say is the “mass exploitation” of a security vulnerability that makes it possible to take full control of servers running ownCloud, a widely used open source file-sharing server app.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.