owncloud-exploits

ownCloud exploits for CVE-2023-49105 Refer to the article for details about the bug. Provided for educational purposes only...

ownCloud vulnerability can be used to extract admin passwords

ownCloud has warned users about three critical security flaws in its file-sharing software which, if exploited, could reveal sensitive information and modify files. An especially and potentially impactful one is a vulnerability that could lead to disclosure of sensitive credentials and...

ownCloud 10.6.x < 10.13.1 Authentication Bypass Vulnerability

ownCloud is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud";...

CVE-2023-49105

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no...

CVE-2023-49105

ownCloud (owncloud/core) versions 10.6.0 through 10.13.0 are affected by an authentication bypass in the WebDAV API. Pre-signed URLs are accepted even when no signing-key is configured for the file owner (the default case), allowing an unauthenticated attacker to access, modify, or delete any fil...