Lucene search
HistoryNov 10, 2022 - 9:15 p.m.
CVE-2022-43679
cve-2022-43679
docker image
misconfiguration
url spoofing
owncloud server 10.11
nvd
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
31.5%
The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.
Affected configurations
Node
owncloudowncloudRange≤10.11.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| owncloud:owncloud | owncloud | le | 10.11.0 |
References
Social References
More
Related
nvd
nvd
CVE-2022-43679
2022-11-10 21:15:11
cvelist
cvelist
CVE-2022-43679
2022-11-10 00:00:00
prion
prion
Design/Logic Flaw
2022-11-10 21:15:00
osv
osv
CVE-2022-43679
2022-11-10 21:15:11
owncloud
owncloud
URL spoofing in password reset mail - ownCloud
2022-10-18 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
31.5%
Related for CVE-2022-43679