GCVE - cpe:2.3:a:owncloud:owncloud_10:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:owncloud:owncloud_10:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Owncloud (`7adb7c81-0e09-5084-ad84-9888a985e435`)
Product	Owncloud 10 (`c07654df-3694-5c94-af82-afa25d6fc5d4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-53831`	vulnerable	2026-07-29 00:01:29.572657	DrawIO for ownCloud 10 is vulnerable to Stored XSS HIGH (8.2) DrawIO for ownCloud is an application for using DrawIO with the file storage, synchronization, and sharing application ownCloud Classic. In DrawIO for ownCloud prior to version 1.0.2, which corresponds to ownCloud 10 prior to version 10.15.3, attackers with access to the DrawIO app can leverage improper neutralization of input during web page generation to achieve stored XSS. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade DrawIO for ownCloud 10 to version 1.0.2 or later to receive a patch. Published: 2026-07-06T16:23:35.257Z Updated: 2026-07-06T18:49:06.961Z Open on db.gcve.eu Reference links https://github.com/owncloud/security-advisories/security/advisories/GHSA-r9j8-fr2h-m47q	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53830`	vulnerable	2026-07-29 00:01:29.566114	Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF) CRITICAL (9.1) Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix. Published: 2026-07-06T15:17:01.924Z Updated: 2026-07-08T03:56:35.944Z Open on db.gcve.eu Reference links https://github.com/owncloud/security-advisories/security/advisories/GHSA-3wg4-mg27-hj4w	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53829`	vulnerable	2026-07-29 00:01:29.547779	ownCloud 10 is vulnerable to Relative Path Traversal HIGH (8) ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path traversal vulnerability in the system to execute arbitrary code. Upgrade ownCloud 10 to version 10.15.3 or later to receive a patch. Published: 2026-07-06T14:46:40.933Z Updated: 2026-07-08T03:56:35.191Z Open on db.gcve.eu Reference links https://github.com/owncloud/security-advisories/security/advisories/GHSA-4439-4wxm-c9px	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-53828`	vulnerable	2026-07-29 00:01:29.547587	SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF) HIGH (8.5) SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker with administrative privileges can use a SSRF vulnerability in the SharePoint app to execute arbitrary code on the system. Upgrade ownCloud 10 to version 10.15.3 or later to receive SharePoint for ownCloud 0.4.1, the fixed version. Published: 2026-07-06T14:41:55.647Z Updated: 2026-07-08T03:56:34.441Z Open on db.gcve.eu Reference links https://github.com/owncloud/security-advisories/security/advisories/GHSA-4m66-rpfj-m5f6	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.