Vulnerability Intelligence Report
SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2025-53828
SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker with administrative privileges can use a SSRF vulnerability in the SharePoint app to execute arbitrary code on the system. Upgrade ownCloud 10 to version 10.15.3 or later to receive SharePoint for ownCloud 0.4.1, the fixed version.
No Active Exploit Signals
CVSS Base Score
8.5
HIGH
Exploitability:1.8
Impact Score:6.1
EPSS Probability:0.23%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-918 ↗CWE-918: Server-Side Request Forgery (SSRF)
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| owncloud | SharePoint | < 0.4.1 (affected) |
| owncloud | ownCloud 10 | < 10.15.3 (affected) |
Threat Intelligence Signals
EPSS Score
0.232%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | GitHub, Inc. · Vendor · USA |
| Reserved | 2025-07-09T14:14:52 |
| Published | 2026-07-06T14:41:55 |
| Last Updated | 2026-07-08T03:56:34 |
Community Chatter & Buzz