# CVE-2025-53828: ownCloud SharePoint app SSRF in ownCloud Classic

Source: https://junglewise.ai/threats/cve-2025-53828-owncloud-sharepoint-app-ssrf-in-owncloud-classic  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-06. Updated: 2026-07-06  
License: CC BY 4.0 with a link back

CVE-2025-53828 · Severity: high · CVSS 8.5 · Published 2026-07-06

A security vulnerability exists in the SharePoint integration for ownCloud Classic, a platform used for corporate file storage and sharing. An attacker with administrative access can exploit this flaw to bypass security boundaries and execute unauthorized commands on the underlying server. This could lead to a complete system takeover, data theft, or disruption of file-sharing services.

Vendors: [ownCloud](https://junglewise.ai/threats/vendors/owncloud).

## Quick answers

**Is CVE-2025-53828 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-53828 being exploited in the wild.

**How severe is CVE-2025-53828?** High severity, with a CVSS score of 8.5, published 6 July 2026.

**Which products and versions are affected?** ownCloud Classic < 10.15.3; ownCloud SharePoint for ownCloud < 0.4.1.

**Is there a fix for CVE-2025-53828?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-53828 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-53828?** Check whether you run ownCloud Classic or ownCloud SharePoint for ownCloud at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in the SharePoint application for ownCloud Classic prior to version 0.4.1. The flaw allows an attacker with administrative privileges to make unauthorized requests from the server, which can be further leveraged to achieve arbitrary code execution (RCE) on the host system. The vulnerability is tracked as CWE-918 and carries a high CVSS score due to the potential for a full scope change and impact on confidentiality, integrity, and availability. Users should upgrade ownCloud 10 to version 10.15.3 or later to receive the patched version of the SharePoint app.

## Affected products

- ownCloud SharePoint for ownCloud < 0.4.1
- ownCloud ownCloud Classic < 10.15.3

## Timeline

- 2026-06-24: advisory: Initial GitHub advisory published
- 2026-07-06: disclosed: NVD publication date

## References

- [https://github.com/owncloud/security-advisories/security/advisories/GHSA-4m66-rpfj-m5f6](https://github.com/owncloud/security-advisories/security/advisories/GHSA-4m66-rpfj-m5f6)

## Related threats

- [ownCloud DrawIO stored XSS in web page generation](https://junglewise.ai/threats/cve-2025-53831-owncloud-drawio-stored-xss-in-web-page-generation)