CVE-2025-53830

Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.

• CWE-918

• https://github.com/owncloud/security-advisories/security/advisories/GHSA-3wg4-mg27-hj4w

Published

Jul 6, 2026

Last Modified

Jul 8, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53825Dokploy is a free, self-hostable Platform as a Service (PaaS…9.8
• CVE-2025-53826File Browser provides a file managing interface within a spe…9.8
• CVE-2025-53827ownCloud Core is the server-side component of the file stora…9.1
• CVE-2025-53828SharePoint for ownCloud is an application for using SharePoi…8.5
• CVE-2025-53829ownCloud is a file storage, synchronization, and sharing app…8
• CVE-2025-5383A vulnerability was found in Yifang CMS up to 2.0.2 and clas…4.8
• CVE-2025-53831DrawIO for ownCloud is an application for using DrawIO with …8.2
• CVE-2025-53832Lara Translate MCP Server is a Model Context Protocol (MCP) …7.5
• CVE-2025-53833LaRecipe is an application that allows users to create docum…10
• CVE-2025-53834Caido is a web security auditing toolkit. A reflected cross-…6.3
• CVE-2025-53835XWiki Rendering is a generic rendering system that converts …9
• CVE-2025-53836XWiki Rendering is a generic rendering system that converts …8.8