ownCloud graphapi - phpinfo Disclosure Detection (CVE-2023-49103)

ownCloud graphapi exposes vendor test script GetPhpInfo.php, leaking phpinfo output including container environment variables such as OWNCLOUDADMIN CVE-2023-49103 / CVE-2023-49282, CISA KEV. !/usr/bin/env python3 -- coding: utf-8 -- """ownCloud graphapi phpinfo disclosure CVE-2023-49103 /...

CVE-2023-49103

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

ownCloud Security Breach

ownCloud is a suite of personal cloud storage solutions from the US-based company ownCloud. A security vulnerability exists in ownCloud graphapi versions prior to 0.2.1, 0.3.1 and 0.3.1. The vulnerability stems from the fact that the graphapi application relies on the third-party GetPhpInfo.php...