CVE-2025-59716

The ownCloud Guests application, in versions prior to 0.12.5 , is vulnerable to unauthenticated user enumeration . The root cause is insufficient validation of the supplied token within the showPasswordForm function at the /apps/guests/register/{email}/{token} endpoint. An attacker can exploit th...