Critical vulnerability in the ownCloud plugin
A vulnerability has been discovered in the graphapi plugin application: the URL "owncloud/apps/graphapi/vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php" becomes accessible. This address calls the phpinfo function, revealing PHP configuration details. This information includes all web server environment variables. If installed in a container, these variables may contain sensitive data such as the ownCloud administrator password, mail server credentials, and other information. All system administrators […]
