Urgent Security Updates: Critical Vulnerabilities Uncovered in ownCloud File Sharing App
ownCloud, the open-source file sync and sharing solution, has issued a crucial warning about three severe security vulnerabilities that could lead to data breaches, risking exposure of sensitive information such as administrator passwords and mail server credentials. Table Of Contents Vulnerability 1: CVE-2023-49103 (CVSS v3 score: 10) In versions 0.2.0 through 0.3.0 of GUI, a critical vulnerability named CVE-2023-49103 poses a serious threat. This flaw, with a maximum CVSS v3 score of 10, enables the theft of credentials and configuration information in containerized deployments. The issue arises from a dependency on a third-party library that discloses PHP environment details via a URL. This exposure could reveal ownCloud administrator passwords, mail server credentials, and license keys. Recommended Fix: - Delete the file owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php. - Disable th...