ownCloud graphapi Information Disclosure Vulnerability
ownCloud · ownCloud graphapi
Date added (CISA)
2023-11-30
Remediation due
2023-12-21
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.