CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Dec 21, 2023

High

CISA KEV

CVE-2023-49103

ownCloud—ownCloud graphapi

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

Required Action

https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-49103

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Nov 30, 2023
KEV Added: Nov 30, 2023
Due Date: Dec 21, 2023
Related Articles: 0

Vendor

ownCloud

ownCloud graphapi