CVE-2023-49105 is an authentication-bypass vulnerability in ownCloud Server 10 that affects WebDAV request handling. In vulnerable deployments, a request can be accepted as trusted when it should still be subject to normal login checks, especially if pre-signed URL or signing-key settings are weak or missing.
This matters because file-sharing platforms often store high-value data, credentials, and internal records. An attacker who exploits this flaw may be able to read, modify, or delete files without proper access. Defenders should identify affected versions, apply vendor fixes, verify signing-secret configuration, and review WebDAV logs for unusual bulk access, strange request patterns, or access from unexpected accounts.


