CVE-2025-53828
Received Received - Intake

SSRF Vulnerability in SharePoint for ownCloud Allows Code Execution

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: GitHub, Inc.

Description
SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint for ownCloud prior to version 0.4.1, which corresponds to ownCloud 10 prior to 10.15.3, an attacker with administrative privileges can use a SSRF vulnerability in the SharePoint app to execute arbitrary code on the system. Upgrade ownCloud 10 to version 10.15.3 or later to receive SharePoint for ownCloud 0.4.1, the fixed version.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-06
Last Modified
2026-07-06
Generated
2026-07-06
AI Q&A
2026-07-06
EPSS Evaluated
N/A
NVD
CVE-2025-53828
EUVD
EUVD-2025-210432

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
owncloud sharepoint_for_owncloud to 0.4.1 (exc)
owncloud owncloud to 10.15.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2025-53828 is a Server-Side Request Forgery (SSRF) vulnerability in SharePoint for ownCloud versions prior to 0.4.1, which corresponds to ownCloud 10 versions before 10.15.3.

An attacker with administrative privileges can exploit this vulnerability to execute arbitrary code on the affected system.

The vulnerability requires low privileges and no user interaction, and it impacts the confidentiality, integrity, and availability of the system.

Impact Analysis

This vulnerability can have severe impacts as it allows an attacker with administrative privileges to execute arbitrary code on the system.

Exploitation can lead to a complete compromise of the affected system, affecting confidentiality, integrity, and availability of data and services.

Because the exploit requires low privileges and no user interaction, it increases the risk of unauthorized system control and potential data breaches.

Mitigation Strategies

To mitigate this vulnerability, upgrade ownCloud 10 to version 10.15.3 or later, which includes SharePoint for ownCloud version 0.4.1 or later where the issue is fixed.

Compliance Impact

The vulnerability allows attackers with administrative privileges to execute arbitrary code on the system, impacting confidentiality, integrity, and availability of data.

Such impacts can potentially lead to non-compliance with standards and regulations like GDPR and HIPAA, which require protection of sensitive data and system integrity.

However, the provided information does not explicitly state the direct effects on compliance with these standards.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-53828. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart