CVE-2023-49103Vulnerability
ownCloud graphapi Information Disclosure Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by GreyNoise · last reported
Last reported 20 months ago
CISA KEVAdded 30 Nov 2023
Fix due 21 Dec 2023
Used by ransomware: not knownCISA KEV catalogue
Fix due 21 Dec 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS78.4%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
New Exploitation Surge: Attackers Target ThinkPHP and ownCloud Flaws at Scale“CVE-2023-49103 (ownCloud GraphAPI Information Disclosure) – A vulnerability already highlighted in a joint advisory from CISA, NSA, and FBI as one of the most exploited in 2023, and exploitation continues to rise.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2022-47945
Thanks — we review every report.