CVE-2023-49105

ownCloud's improper authentication flaw lets attackers access, modify, or delete files without authentication if a victim's username is known and no signing key is configured.

This improper authentication vulnerability allows unauthenticated access to files, violating data integrity and confidentiality. DIBs must ensure signing keys are configured and monitor for username-based attacks. The flaw is actively exploited in the wild, indicating a high risk of data exfiltration or ransomware deployment.

Shame score — A known authentication bypass allowing unauthenticated file access is a severe, avoidable failure that directly compromises data integrity and confidentiality.