CVE-2025-53827: ownCloud Core: Updater has an exposed dangerous method or function
ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ownCloud Core: Updaterto a version that resolves this vulnerability.Fixed in 10.15.3
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53827?
CVE-2025-53827 has a critical severity rating of 9.1.
How do I fix CVE-2025-53827?
To fix CVE-2025-53827, upgrade ownCloud to version 10.15.3 or later.
What component is affected by CVE-2025-53827?
CVE-2025-53827 affects the ownCloud Core Updater in versions prior to 10.15.3.
Who is at risk with CVE-2025-53827?
Administrators with elevated privileges are at risk of exploitation with CVE-2025-53827.
What type of vulnerability is CVE-2025-53827?
CVE-2025-53827 is an exposed dangerous method vulnerability in the ownCloud Updater.