CVE-2025-53828— SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| owncloud | ownCloud 10 | < 10.15.3 | affected |
| owncloud | SharePoint | < 0.4.1 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-53828
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
Source: NVD (National Vulnerability Database)
Vulnerability Description
SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker with administrative privileges can use a SSRF vulnerability in the SharePoint app to execute arbitrary code on the system. Upgrade ownCloud 10 to version 10.15.3 or later to receive SharePoint for ownCloud 0.4.1, the fixed version.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
服务端请求伪造(SSRF)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| owncloud | SharePoint | < 0.4.1 | - | |
| owncloud | ownCloud 10 | < 10.15.3 | - |
II. Public POCs for CVE-2025-53828
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCVerified env Premium
Qwen3.6-35B-A3B · 9264 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2025-53828
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-53828 (1)
Same Patch Batch · owncloud · 2026-07-06 · 5 CVEs total
| CVE-2025-53827 | 9.1 CRITICAL | ownCloud Core: Updater has an exposed dangerous method or function |
| CVE-2025-53830 | 9.1 CRITICAL | Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF) |
| CVE-2025-53831 | 8.2 HIGH | DrawIO for ownCloud 10 is vulnerable to Stored XSS |
| CVE-2025-53829 | 8.0 HIGH | ownCloud 10 is vulnerable to Relative Path Traversal |
IV. Related Vulnerabilities
Same product: SharePoint
Same vendor: owncloud
- CVE-2025-53831
DrawIO for ownCloud 10 is vulnerable to Stored XSS - CVE-2025-53830
Anti-Virus for ownCloud 10 is vulnerable to Server-Side Requ - CVE-2025-53829
ownCloud 10 is vulnerable to Relative Path Traversal - CVE-2025-53827
ownCloud Core: Updater has an exposed dangerous method or fu - CVE-2019-25337
OwnCloud 8.1.8 - Username Disclosure
Same weakness: CWE-918
- CVE-2026-54607
FastGPT: SSRF in HTTP-tool OpenAPI schema importer via Swagg - CVE-2026-45796
Coder vulnerable to unauthenticated SSRF via Azure Instance - CVE-2026-59707
LocalAI - Server-Side Request Forgery via POST /models/apply - CVE-2026-58468
NocoBase 2.1.20 Server-Side Request Forgery via serverReques - CVE-2026-34170
Coolify: Server-Side Request Forgery via attacker-controlled
V. Comments for CVE-2025-53828
No comments yet