A critical SSRF vulnerability in the Anti-Virus for ownCloud application allows high-privileged attackers to leverage the server to perform unauthorized network requests.

The vulnerability is a Server-Side Request Forgery (SSRF) flaw occurring within the anti-virus integration. It requires high-privileged (administrator) access to successfully exploit, allowing the server to be used as a proxy for internal or external network requests.

With a CVSS score of 9.1, this vulnerability presents a significant risk to the internal infrastructure. A successful exploit could allow an attacker to bypass firewalls, interact with internal services, or exfiltrate metadata, potentially leading to a full compromise of the application environment.

Immediate Action: Upgrade Anti-Virus for ownCloud to version 1.2.3 or later, and ensure the underlying ownCloud 10 installation is updated to at least version 10.15.3.

Proactive Monitoring: Monitor server egress traffic for unusual network activity or connections to internal resources that should not be reachable from the web application.

Compensating Controls: Restrict server-side network access via host-based firewalls or network egress filtering to minimize the impact of potential SSRF vectors.

Public Exploit Available: false

Administrators should treat this as a high-priority update. While the exploit requires high-level privileges, the ability to perform SSRF from the server level poses a systemic threat to the integrity of the host environment.