CVE-2025-53830criticalCWE-918

CVE-2025-53830: fallo crítico en owncloud Anti-Virus for ownCloud

Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear ownCloud 10+ Monitorear Anti-Virus for ownCloud

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.1epss 0.5%
Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
owncloud · Anti-Virus for ownCloudowncloud · ownCloud 10
CVEs relacionadas — owncloud Anti-Virus for ownCloud

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-53829HIGHownCloud 10 is vulnerable to Relative Path TraversalEPSS 0.5%CVE-2025-53828HIGHSharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.4%CVE-2025-53831HIGHDrawIO for ownCloud 10 is vulnerable to Stored XSSEPSS 0.3%