SharePoint for ownCloud is an application for using SharePoint with the file storage, synchronization, and sharing application ownCloud Classic. In SharePoint f…

A Server-Side Request Forgery (SSRF) vulnerability exists in the SharePoint for ownCloud application prior to version 0.4.1, which corresponds to ownCloud 10 prior to version 10.15.3. An attacker with administrative privileges can exploit this SSRF flaw to execute arbitrary code on the affected system. The vulnerability affects the SharePoint integration app used with ownCloud Classic for file storage, synchronization, and sharing. The issue has been patched in SharePoint for ownCloud version 0.4.1, delivered as part of ownCloud 10 version 10.15.3. Users are strongly advised to upgrade to ownCloud 10.15.3 or later to remediate this vulnerability. The flaw requires administrative access to exploit, somewhat limiting the attack surface but still representing a significant risk in environments where admin accounts may be compromised.