This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] ownCloud fixes 5 vulnerabilities
ownCloud fixes 2 vulnerabilities in version 10.15.3 [1][2]. This version also fixes 3 vulnerabilities in ownCloud extensions (ownCloud App), namely in Anti-Virus [3], SharePoint [4] and DrawIO [5]
Allows an authenticated remote attacker with administrator privileges to abuse functionality in ownCloud Updater and thereby execute arbitrary code [1].
The vulnerability is present in product:
- ownCloud; >=10.0.0, <10.15.3;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2025-53827 at cve.org, NVD
- CWE-749: Exposed Dangerous Method or Function at cwe.mitre.org
The vulnerability was publicly disclosed 6. 7. 2026.
Allows an authenticated remote attacker with administrator privileges to execute arbitrary code by means of unauthorized access to directories [2].
The vulnerability is present in product:
- ownCloud; >=10.0.0, <10.15.3;
CVSS: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2025-53829 at cve.org, NVD
- CWE-23: Relative Path Traversal at cwe.mitre.org
The vulnerability was publicly disclosed 6. 7. 2026.
Links
- [1] https://github.com/owncloud/security-advisories/security/advisories/GHSA-hvcx-ph66-mmvw
- [2] https://github.com/owncloud/security-advisories/security/advisories/GHSA-4439-4wxm-c9px
- [3] https://github.com/owncloud/security-advisories/security/advisories/GHSA-3wg4-mg27-hj4w
- [4] https://github.com/owncloud/security-advisories/security/advisories/GHSA-4m66-rpfj-m5f6
- [5] https://github.com/owncloud/security-advisories/security/advisories/GHSA-r9j8-fr2h-m47q
By CESNET, z.s.p.o. Martin Krajči on 8. 7. 2026.