CVE-2022-43679

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-43679
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43679.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-43679
Published
2022-11-10T00:00:00Z
Modified
2026-08-12T03:51:35.970179123Z
Severity
  • 4.2 (Medium) CVSS_V3 - CVSS:3.1/AC:H/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:R CVSS Calculator
Summary
[none]
Details

The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "10.11"
                }
            ]
        }
    ],
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/43xxx/CVE-2022-43679.json"
}
References

Affected packages

Git / github.com/owncloud/core

Affected ranges

Type
GIT
Repo
https://github.com/owncloud/core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eb5a5034b61efb64bf7ebf921db41afe562829a5
Database specific
Show details 
{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:owncloud:owncloud:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "10.11.0"
        }
    ]
}

Affected versions

v1.*
v1.0.0beta1
v10.*
v10.0.0
v10.0.0RC1
v10.0.0RC2
v10.0.0RC3
v10.0.0RC4
v10.0.0RC5
v10.0.0alpha
v10.0.0beta
v10.0.0beta2
v10.0.1
v10.0.10
v10.0.10RC1
v10.0.10RC2
v10.0.10RC3
v10.0.10RC4
v10.0.1RC1
v10.0.1RC2
v10.0.1RC3
v10.0.1RC4
v10.0.1RC5
v10.0.2
v10.0.2RC1
v10.0.3
v10.0.3RC1
v10.0.3beta
v10.0.3beta2
v10.0.4
v10.0.4RC1
v10.0.4RC2
v10.0.4beta1
v10.0.4beta2
v10.0.5
v10.0.5RC1
v10.0.5RC2
v10.0.5RC3
v10.0.5RC4
v10.0.8
v10.0.8RC1
v10.0.8RC2
v10.0.8RC3
v10.0.8RC4
v10.0.9
v10.0.9RC1
v10.0.9RC2
v10.0.9RC3
v10.0.9RC4
v10.0.9beta
v10.0beta2
v10.1.0
v10.1.0RC1
v10.1.0RC2
v10.1.0beta
v10.11.0
v10.11.0-beta.1
v10.11.0-rc.1
v10.11.0-rc.2
v10.11.0-rc.3
v10.3.0alpha
v10.3.0alpha2
v10.6.0beta1
v10.7.0beta2
v3.*
v3.0
v4.*
v4.0.0
v4.0.0RC
v4.0.0RC2
v4.0.0beta
v4.0.1
v4.0.4
v4.0.5
v4.0.6
v4.5.0
v4.5.0RC1
v4.5.0RC2
v4.5.0RC3
v4.5.0beta3
v4.5.0beta4
v5.*
v5.0.0
v5.0.0RC1
v5.0.0RC2
v5.0.0RC3
v5.0.0alpha1
v5.0.0beta1
v5.0.0beta2
v6.*
v6.0.0RC1
v6.0.0RC2
v6.0.0alpha2
v6.0.0beta2
v6.0.0beta3
v6.0.0beta4
v6.0.0beta5
v7.*
v7.0.0alpha2
v7.0.0beta1
v8.*
v8.0.0
v8.0.0RC1
v8.0.0RC2
v8.0.0alpha1
v8.0.0alpha2
v8.0.0beta1
v8.0.0beta2
v8.1.0alpha1
v8.1.0alpha2
v8.1.0beta1
v8.1.0beta2
v8.1RC2
v8.2RC1
v8.2beta1
v9.*
v9.0.0beta2
v9.0.1beta2
v9.0beta1
v9.1.0RC1
v9.1.0beta1
v9.1.0beta2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-43679.json"