{"cvss":10.0,"datePublished":"2023-11-30","dateUpdated":"2023-11-30","description":"ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.","dueDate":"2023-12-21","id":"CVE-2023-49103","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ;  https://nvd.nist.gov/vuln/detail/CVE-2023-49103","product":"ownCloud graphapi","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"ownCloud graphapi Information Disclosure Vulnerability","vendor":"ownCloud"}