High severity · published Jul 6, 2026
CVE-2025-53828
SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
8.5
CVSS
0.4%
EPSS
No
On KEV
Description
SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker with administrative privileges can use a SSRF vulnerability in the SharePoint app to execute arbitrary code on the system. Upgrade ownCloud 10 to version 10.15.3 or later to receive SharePoint for ownCloud 0.4.1, the fixed version.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
SharePoint · owncloud
< 0.4.1 · source: vendor
O1
ownCloud 10 · owncloud
< 10.15.3 · source: vendor
Affected product
O1
ownCloud 10
owncloud
More from ownCloud 10
9.1
CVE-2025-53830
Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
8.2
CVE-2025-53831
DrawIO for ownCloud 10 is vulnerable to Stored XSS
8.0
CVE-2025-53829
ownCloud 10 is vulnerable to Relative Path Traversal