CVE-2023-49105, WebDAV Api Authentication Bypass in own Cloud | Grey Noise Blog
Summary: CVE-2023-49105 is a WebDAV API authentication bypass in ownCloud affecting versions 10.6.0 through 10.13.0, allowing an attacker who knows a username to access, modify, or delete any file without authentication, even when no signing key is configured, by generating pre-signed URLs for arbitrary file operations. GreyNoise's Ron Bowes developed a PoC and verified Abionics Security's findings that the flaw can enable remote code execution, with upgrading to ownCloud 10.13.3 or later reported to resolve it.
What's compelling: GreyNoise rates this 9.8 flaw as arguably more severe than the CVSS 10 CVE-2023-49103 because it affects all installations, not just Docker-based ones, and exploitation can lead to data theft, ransomware deployment, and remote code execution.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2023-49103CVE-2023-49105
- Related
- CVE-2023-49103: own Cloud Critical Vulnerability Quickly Exploited in the Wild | Grey Noise Blog Cyber Risks ·CVE-2023-49105: own Cloud Improper Authentication Vulnerability Known Exploited Vulnerabilities · Aug 27, 2026CVE-2023-49103: own Cloud graphapi Information Disclosure Vulnerability Known Exploited Vulnerabilities · Nov 30, 2023