CVE-2022-43679: ownCloud

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.

Affected products

• ownCloud ownCloud: up to and including 10.11.0

Published 2022-11-10. Last modified 2026-06-17.