CVE-2025-53830
Received Received - Intake

Server-Side Request Forgery in Anti-Virus for ownCloud

Publication date: 2026-07-06

Last updated on: 2026-07-06

Assigner: GitHub, Inc.

Description
Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side Request Forgery (SSRF). This corresponds to versions of ownCloud 10 prior to 10.15.3. Upgrade ownCloud 10 to version 10.15.3 or later or upgrade Anti-Virus for ownCloud 10 to version 1.2.3 or later to receive a fix.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-06
Last Modified
2026-07-06
Generated
2026-07-06
AI Q&A
2026-07-06
EPSS Evaluated
N/A
NVD
CVE-2025-53830
EUVD
EUVD-2025-210434

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
owncloud anti-virus_for_owncloud to 1.2.3 (exc)
owncloud owncloud to 10.15.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The vulnerability in Anti-Virus for ownCloud before version 1.2.3 is a Server-Side Request Forgery (SSRF). This means that an attacker with administrative privileges can exploit the system to make unauthorized requests from the server, potentially allowing them to load and execute arbitrary code.

This affects versions of ownCloud 10 prior to 10.15.3 and the Anti-Virus app versions before 1.2.3.

Impact Analysis

This vulnerability can have a severe impact as it allows attackers with administrative privileges to execute arbitrary code on the server. This can lead to full compromise of the affected system, including unauthorized access, data manipulation, and disruption of services.

Mitigation Strategies

To mitigate the Server-Side Request Forgery (SSRF) vulnerability in Anti-Virus for ownCloud, you should upgrade your software to fixed versions.

  • Upgrade ownCloud 10 to version 10.15.3 or later.
  • Upgrade the Anti-Virus for ownCloud application to version 1.2.3 or later.
Compliance Impact

The provided information does not specify how the Server-Side Request Forgery (SSRF) vulnerability in Anti-Virus for ownCloud affects compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-53830. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart