Thursday 22 October 2026 15:30:31 GMT+02:00

Netcrook

HomeManifesto
News
Techcrook
Geocrook
WikicrookTeamAppContact
EnglishItaliano

WIKICROOK

CVE-2023-49105

An ownCloud Server 10 vulnerability that can bypass authentication through WebDAV request handling.

CVE-2023-49105 is an authentication-bypass vulnerability in ownCloud Server 10 that affects WebDAV request handling. In vulnerable deployments, a request can be accepted as trusted when it should still be subject to normal login checks, especially if pre-signed URL or signing-key settings are weak or missing.

This matters because file-sharing platforms often store high-value data, credentials, and internal records. An attacker who exploits this flaw may be able to read, modify, or delete files without proper access. Defenders should identify affected versions, apply vendor fixes, verify signing-secret configuration, and review WebDAV logs for unusual bulk access, strange request patterns, or access from unexpected accounts.

← WIKICROOK index