CVE-2025-53830CWE-918ssrf

CVE-2025-53830

Critical · published July 6, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00462 · 39.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-06T20:16Z
References (1)
https://github.com/owncloud/security-advisories/security/advisories/GHSA-3wg4-mg27-hj4w · [email protected]
EPSS history
Timeline
  • 06 JUL 15:17Z
    Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
    cvelistv5