The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.
References
Link | Resource |
---|---|
https://owncloud.com | Product Vendor Advisory |
Configurations
Information
Published : 2022-11-10 13:15
Updated : 2022-11-15 11:44
NVD link : CVE-2022-43679
Mitre link : CVE-2022-43679
JSON object : View
CWE
Products Affected
owncloud
- owncloud