Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-49103 PoC — ownCloud 安全漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/ownCloud%20graphapi%20%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E%20CVE-2023-49103.md
Associated Vulnerability
Title:ownCloud 安全漏洞 (CVE-2023-49103)
Description:ownCloud是美国ownCloud公司的一套个人云存储解决方案。 ownCloud graphapi 0.2.1 之前、0.3.1 之前版本存在安全漏洞，该漏洞源于graphapi 应用程序依赖于提供 URL 的第三方 GetPhpInfo.php 库，当访问此 URL 时，它会显示 PHP 环境 (phpinfo) 的配置详细信息，这些信息包括网络服务器的所有环境变量，在容器化部署中，这些环境变量可能包括敏感数据，例如 ownCloud 管理员密码、邮件服务器凭据和许可证密钥，攻击者利用该漏洞可以从
File Snapshot

 # ownCloud graphapi 信息泄露漏洞 CVE-2023-49103

## 漏洞描述

[ownCloud](https://owncloud.com/) 是一个开源的文件同步与共享平

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.