New Exploitation Surge: Attackers Target ThinkPHP and own Cloud Flaws at Scale | Grey Noise Blog

Summary: GreyNoise reports a rapid increase in exploit attempts over the past 10 days against two vulnerabilities: CVE-2022-47945, a local file inclusion flaw in ThinkPHP, and CVE-2023-49103, a flaw in ownCloud's GraphAPI. Only one of the two is included in the KEV catalog, even though attackers are actively scanning and targeting both.
Why it matters: One of these two actively exploited flaws is not on the KEV list, so a patching process that waits for that designation would leave it exposed while attackers are already scanning for it.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-47945 CVE-2023-49103
Related: CVE-2023-49103: own Cloud graphapi Information Disclosure Vulnerability Known Exploited Vulnerabilities · Nov 30, 2023
CVE-2023-49105, WebDAV Api Authentication Bypass in own Cloud | Grey Noise Blog Cyber Risks ·
At The Edge Clear: July 06 - 13. 2026 Cyber Risks ·