CVE-2025-53830criticalCWE-918

CVE-2025-53830: falha crítica em owncloud Anti-Virus for ownCloud

Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ownCloud 10+ Monitorar Anti-Virus for ownCloud

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 0.5%
Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
owncloud · Anti-Virus for ownCloudowncloud · ownCloud 10
CVEs relacionadas — owncloud Anti-Virus for ownCloud

No mesmo produto, das mais perigosas para as menos.

CVE-2025-53829HIGHownCloud 10 is vulnerable to Relative Path TraversalEPSS 0.5%CVE-2025-53828HIGHSharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.4%CVE-2025-53831HIGHDrawIO for ownCloud 10 is vulnerable to Stored XSSEPSS 0.3%