CVE-2023-49105 OwnCloud OwnCloud
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed…
- CVSS
- 9.8 Critical
- EPSS
- 43%
- Percentile
- 99
- Published
- 2023-11-21
- Force
- 11 of 12
- Public PoC
- 1
CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
On CISA’s exploited list
ownCloud Improper Authentication Vulnerability
- Added
- 2026-08-27
- Federal patch deadline
- 2026-08-30
- Ransomware use
- not known