CVE-2023-49105 PoC — ownCloud 安全漏洞

Source

https://github.com/ambionics/owncloud-exploits

Associated Vulnerability

Title: ownCloud 安全漏洞 (CVE-2023-49105)
Description:An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs because pre-signed URLs can be accepted even when no signing-key is configured for the owner of the files. The earliest affected version is 10.6.0.

Description

ownCloud exploits for CVE-2023-49105

Readme

# ownCloud exploits for CVE-2023-49105

Refer to [the article](https://www.ambionics.io/blog/owncloud-cve-2023-49103-cve-2023-49105) for details about the bug.
Provided for educational purposes only.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →