Samedi 17 Octobre 2026 00:00:16 GMT+02:00

Netcrook

AccueilManifeste
Actualités
Techcrook
Geocrook
WikicrookÉquipeAppContact
EnglishItaliano

WIKICROOK

CVE-2023-49105

An ownCloud Server 10 vulnerability that can bypass authentication through WebDAV request handling.

CVE-2023-49105 is an authentication-bypass vulnerability in ownCloud Server 10 that affects WebDAV request handling. In vulnerable deployments, a request can be accepted as trusted when it should still be subject to normal login checks, especially if pre-signed URL or signing-key settings are weak or missing.

This matters because file-sharing platforms often store high-value data, credentials, and internal records. An attacker who exploits this flaw may be able to read, modify, or delete files without proper access. Defenders should identify affected versions, apply vendor fixes, verify signing-secret configuration, and review WebDAV logs for unusual bulk access, strange request patterns, or access from unexpected accounts.

← index WIKICROOK