by Kastro
Paper/Archive/CVE-2025-53830

CVE-2025-53830

owncloud Anti-Virus for ownCloud — Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 40.0.400 × 208.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.

Affected

ProductAffectedFixed inSource
Anti-Virus for ownCloud< 1.2.3–CNA
ownCloud 10< 10.15.3–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/owncloud/security-advisories/security/advisories/GHSA-3wg4-mg27-hj4w