NVD disclosure day
CVE-2023-49105
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
ownCloud software has a vulnerability where an unauthenticated attacker can access, modify, or delete any file by knowing a victim's username and exploiting pre-signed URLs when a signing-key is not configured. This could lead to unauthorized data access or alteration.
CVE-2023-49103
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in the ownCloud graphapi app can expose sensitive system details, including credentials. This poses a business risk by potentially allowing attackers unauthorized access to organizational data and systems. Updates are recommended to address this exposure.
CVE-2023-49060
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Firefox for iOS may allow an attacker to access internal pages or data by ex-filtrating a security key. This could potentially lead to unauthorized information disclosure.