CVE-2025-53827

Katalog CVE

CVSS 9.1 · Critical EPSS 0,62%

Kerentanan Exposed Dangerous Method or Function. Skor CVSS 3.1 9.1 (Critical) menurut github.com.

Deskripsi (NVD)

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

Rincian

Terbit di NVD

6 Juli 2026

Terakhir diubah

6 Oktober 2026

Status NVD

Deferred

CVSS 3.1

9.1 (Critical), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-749: Exposed Dangerous Method or Function

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/owncloud/security-advisories/security/advisories/GHSA-hvcx-ph66-mmvw