"Hackers Start Exploiting Critical ownCloud Flaw, Patch Now"

Hackers are targeting CVE-2023-49103, a critical ownCloud vulnerability that exposes admin passwords, mail server credentials, and license keys in containerized deployments. The ownCloud product is a popular open-source file synchronization and sharing solution for those who want to manage and share data through a self-hosted platform. On November 21, the developers of the software released security bulletins for three vulnerabilities that could lead to data breaches, suggesting that ownCloud administrators implement the recommended mitigations. Of the three flaws, CVE-2023-49103 was given a maximum CVSS severity score of 10.0. This article continues to discuss the potential exploitation and impact of the critical ownCloud vulnerability.

Bleeping Computer reports "Hackers Start Exploiting Critical ownCloud Flaw, Patch Now"

Submitted by grigby1