EXPOSURES › CVE-2023-49103

CVE-2023-49103

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-11-30 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-49103 ↗

⌖ EXPLOITED IN THE WILD SHAME 50/100 exploited-in-wild

ownCloud's graphapi exposed administrative credentials via a phpinfo() file, actively exploited in the wild.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

ownCloud · vendor ownCloud graphapi · product

DESCRIPTION

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.