CVE-2025-53827

9.1 Critique

Publiée le 06/07/2026 à 18:16 · Modifiée le 07/10/2026 à 00:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

Traduire en français

Produits concernés

ownCloud Core

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.1 Critique	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-749

Références

https://github.com/owncloud/security-advisories/security/advisories/GHSA-hvcx-ph66-mmvw

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories