{"id":"CVE-2023-49103","vendor_project":"ownCloud","product":"ownCloud graphapi","vulnerability_name":"ownCloud graphapi Information Disclosure Vulnerability","date_added":"2023-11-30","due_date":"2023-12-21","known_ransomware_use":"Unknown","short_description":"ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cwes":"CWE-200","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","nvd_published":"2023-11-21","nvd_status":"Analyzed","epss":0.78428,"epss_percentile":0.99563,"cvss_score":7.5,"days_published_to_kev":9,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2023-49103","by":"CyberMax"}