Description
ownCloud 存在鉴权绕过漏洞，此漏洞是由于 Verifier.php 存在设计缺陷。
ownCloud CVE-2023-49105 鉴权绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-49105
https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/
https://www.sentinelone.com/vulnerability-database/cve-2023-49105/
https://www.greynoise.io/blog/cve-2023-49105-webdav-api-authentication-bypass-in-owncloud
https://www.triskelelabs.com/resources/cve-2023-49103-cve-2023-49104-and-cve-2023-49105-owncloud-multiple-vulnerabilities
https://www.hhs.gov/sites/default/files/owncloud-vulnerability-white-paper-tlpclear.pdf
https://blog.trackflaw.com/en/pwncloud-your-own-unsecure-platform/