Vulnerability-Lookup

WID-SEC-W-2023-2985

Vulnerability from csaf_certbund - Published: 2023-11-21 23:00 - Updated: 2026-08-27 22:00

Summary

ownCloud: Mehrere Schwachstellen

Severity

Kritisch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: ownCloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ownCloud ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2023-49103

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ownCloud ownCloud <graphapi 0.3.1 ownCloud / ownCloud		<graphapi 0.3.1

CVE-2023-49104

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ownCloud ownCloud <oauth2 0.6.1 ownCloud / ownCloud		<oauth2 0.6.1

CVE-2023-49105

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
ownCloud ownCloud <10.13.1 ownCloud / ownCloud		<10.13.1

References

10 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://github.com/advisories/GHSA-7f2q-q825-57p8	external
https://github.com/advisories/GHSA-phfx-x4q3-w99v	external
https://github.com/advisories/GHSA-585g-f852-v6p4	external
https://owncloud.com/security-advisories/disclosu…	external
https://owncloud.com/security-advisories/subdomai…	external
https://owncloud.com/security-advisories/webdav-a…	external
https://www.greynoise.io/blog/cve-2023-49103-ownc…	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "ownCloud ist eine \"on-premise\" Plattform f\u00fcr Dateifreigabe und Zusammenarbeit.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ownCloud ausnutzen, um Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-2985 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2985.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-2985 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2985"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2023-11-21",
        "url": "https://github.com/advisories/GHSA-7f2q-q825-57p8"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2023-11-21",
        "url": "https://github.com/advisories/GHSA-phfx-x4q3-w99v"
      },
      {
        "category": "external",
        "summary": "GitHub Advisory Database vom 2023-11-21",
        "url": "https://github.com/advisories/GHSA-585g-f852-v6p4"
      },
      {
        "category": "external",
        "summary": "ownCloud Security Advisory vom 2023-11-21",
        "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/"
      },
      {
        "category": "external",
        "summary": "ownCloud Security Advisory vom 2023-11-21",
        "url": "https://owncloud.com/security-advisories/subdomain-validation-bypass/"
      },
      {
        "category": "external",
        "summary": "ownCloud Security Advisory vom 2023-11-21",
        "url": "https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/"
      },
      {
        "category": "external",
        "summary": "Greynoise Blog vom 2023-11-28",
        "url": "https://www.greynoise.io/blog/cve-2023-49103-owncloud-critical-vulnerability-quickly-exploited-in-the-wild"
      },
      {
        "category": "external",
        "summary": "CISA KEV CVE-2023-49105 vom 2026-08-27",
        "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49105"
      }
    ],
    "source_lang": "en-US",
    "title": "ownCloud: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-08-27T22:00:00.000+00:00",
      "generator": {
        "date": "2026-08-28T07:31:06.034+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2023-2985",
      "initial_release_date": "2023-11-21T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-11-21T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2023-11-28T23:00:00.000+00:00",
          "number": "2",
          "summary": "Aktive Ausnutzung gemeldet"
        },
        {
          "date": "2026-08-27T22:00:00.000+00:00",
          "number": "3",
          "summary": "CVE-2023-49105 wird ausgenutzt"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cgraphapi 0.3.1",
                "product": {
                  "name": "ownCloud ownCloud \u003cgraphapi 0.3.1",
                  "product_id": "T031331"
                }
              },
              {
                "category": "product_version",
                "name": "graphapi 0.3.1",
                "product": {
                  "name": "ownCloud ownCloud graphapi 0.3.1",
                  "product_id": "T031331-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:owncloud:owncloud:graphapi_0.3.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003coauth2 0.6.1",
                "product": {
                  "name": "ownCloud ownCloud \u003coauth2 0.6.1",
                  "product_id": "T031332"
                }
              },
              {
                "category": "product_version",
                "name": "oauth2 0.6.1",
                "product": {
                  "name": "ownCloud ownCloud oauth2 0.6.1",
                  "product_id": "T031332-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:owncloud:owncloud:oauth2_0.6.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c10.13.1",
                "product": {
                  "name": "ownCloud ownCloud \u003c10.13.1",
                  "product_id": "T031333"
                }
              },
              {
                "category": "product_version",
                "name": "10.13.1",
                "product": {
                  "name": "ownCloud ownCloud 10.13.1",
                  "product_id": "T031333-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:owncloud:owncloud:10.13.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ownCloud"
          }
        ],
        "category": "vendor",
        "name": "ownCloud"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-49103",
      "product_status": {
        "known_affected": [
          "T031331"
        ]
      },
      "release_date": "2023-11-21T23:00:00.000+00:00",
      "title": "CVE-2023-49103"
    },
    {
      "cve": "CVE-2023-49104",
      "product_status": {
        "known_affected": [
          "T031332"
        ]
      },
      "release_date": "2023-11-21T23:00:00.000+00:00",
      "title": "CVE-2023-49104"
    },
    {
      "cve": "CVE-2023-49105",
      "product_status": {
        "known_affected": [
          "T031333"
        ]
      },
      "release_date": "2023-11-21T23:00:00.000+00:00",
      "title": "CVE-2023-49105"
    }
  ]
}

CVE-2023-49103 (GCVE-0-2023-49103)

Vulnerability from cvelistv5 – Published: 2023-11-21 00:00 – Updated: 2025-10-21 23:05

Summary

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure.

Severity

10 (Critical)


                        
                          CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N

SSVC

Exploitation: active Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-27 22:24 UTC

CWE

n/a
CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Assigner

mitre mitre root Scorecard

References

3 references

URL	Tags
https://owncloud.org/security
https://owncloud.com/security-advisories/disclosu…
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:46:28.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.org/security"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-49103",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-27T22:24:19.695955Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2023-11-30",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49103"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-200",
                "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:32.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49103"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2023-11-30T00:00:00.000Z",
            "value": "CVE-2023-49103 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment (phpinfo). This information includes all the environment variables of the webserver. In containerized deployments, these environment variables may include sensitive data such as the ownCloud admin password, mail server credentials, and license key. Simply disabling the graphapi app does not eliminate the vulnerability. Additionally, phpinfo exposes various other potentially sensitive configuration details that could be exploited by an attacker to gather information about the system. Therefore, even if ownCloud is not running in a containerized environment, this vulnerability should still be a cause for concern. Note that Docker containers from before February 2023 are not vulnerable to the credential disclosure."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 10,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-12-05T00:07:02.851Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://owncloud.org/security"
        },
        {
          "url": "https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-49103",
    "datePublished": "2023-11-21T00:00:00.000Z",
    "dateReserved": "2023-11-21T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:05:32.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-49104 (GCVE-0-2023-49104)

Vulnerability from cvelistv5 – Published: 2023-11-21 00:00 – Updated: 2024-09-04 18:44

Summary

An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able to pass in a crafted redirect-url that bypasses validation, and consequently allows an attacker to redirect callbacks to a Top Level Domain controlled by the attacker.

Severity

8.7 (High)


                        
                          CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:C/UI:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-04 18:43 UTC

CWE

Assigner

mitre mitre root Scorecard

References

2 references

URL	Tags
https://owncloud.org/security
https://owncloud.com/security-advisories/subdomai…

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:46:29.064Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.org/security"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.com/security-advisories/subdomain-validation-bypass/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-49104",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-04T18:43:44.179065Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-04T18:44:05.609Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able to pass in a crafted redirect-url that bypasses validation, and consequently allows an attacker to redirect callbacks to a Top Level Domain controlled by the attacker."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AC:H/AV:N/A:N/C:H/I:H/PR:N/S:C/UI:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-21T21:25:36.804Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://owncloud.org/security"
        },
        {
          "url": "https://owncloud.com/security-advisories/subdomain-validation-bypass/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-49104",
    "datePublished": "2023-11-21T00:00:00.000Z",
    "dateReserved": "2023-11-21T00:00:00.000Z",
    "dateUpdated": "2024-09-04T18:44:05.609Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-49105 (GCVE-0-2023-49105)

Vulnerability from cvelistv5 – Published: 2023-11-21 00:00 – Updated: 2026-08-28 03:55

Summary

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-11-27 00:00 UTC

CWE

n/a
CWE-287 - Improper Authentication

Assigner

mitre mitre root Scorecard

References

4 references

URL	Tags
https://owncloud.org/security
https://owncloud.com/security-advisories/webdav-a…
https://hunt.io/blog/chinese-speaking-operator-ph…	third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T21:46:29.148Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.org/security"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-49105",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-27T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2026-08-27",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49105"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-287",
                "description": "CWE-287 Improper Authentication",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T03:55:23.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "third-party-advisory"
            ],
            "url": "https://hunt.io/blog/chinese-speaking-operator-philippine-nuclear-naval-contractor"
          },
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-49105"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-08-27T00:00:00.000Z",
            "value": "CVE-2023-49105 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-11-21T21:25:15.077Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://owncloud.org/security"
        },
        {
          "url": "https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-49105",
    "datePublished": "2023-11-21T00:00:00.000Z",
    "dateReserved": "2023-11-21T00:00:00.000Z",
    "dateUpdated": "2026-08-28T03:55:23.877Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

WID-SEC-W-2023-2985

CVE-2023-49103 (GCVE-0-2023-49103)

CVE-2023-49104 (GCVE-0-2023-49104)

CVE-2023-49105 (GCVE-0-2023-49105)

Tags

Sightings

Nomenclature

Related by attack behaviour