CVE-2022-43679

No fix known EPSS <1%CVSS 4.2

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.

Published 2022-11-10 · CVE record · OSV

Products: owncloud