ownCloud — ownCloud graphapi — ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.
Details
EPSS Score
ⓘ
78.43%
99.5th percentile
Confidence
100%
CISA KEV
Date Added
Nov 30, 2023
Patch Due
Dec 21, 2023
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.