← Database

CVE-2022-43679

MEDIUM CVSS: 4.2 Published: 2022-11-10 Modified: 2026-06-17

Description

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.

Affected Platforms

Owncloud Owncloud

Weakness Type

NVD-CWE-noinfo, CWE-284

References