CVEvulnerability

CVE-2025-53827

9.1 CRITICAL Published 2026-07-06 Modified 2026-10-06 Official page ↗
Status
Deferred
Published
2026-07-06
Last modified
2026-10-06
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-749

Description

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

Related

Weakness · CWE (1)

  • CWE-749 Exposed Dangerous Method or Function weakness

References