CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2023-11-21
ownCloud Core WebDAV API Authentication Bypass via Pre-Signed URLs (CVE-2023-49105)
[Affected Scope] ownCloud Core versions from 10.6.0 up to (but excluding) 10.13.1 are affected.
[Impact] Unauthenticated attackers can access, modify, or delete any file if they know the victim's username and the victim has no signing-key configured.
[Mitigation] Immediately upgrade ownCloud Core to version 10.13.1 or higher, and enforce signing-key configurations as a temporary workaround.