CVE-2025-53830 is a critical Server-Side Request Forgery (SSRF) vulnerability (CWE-918) in the Anti-Virus for ownCloud application, which integrates with ownCloud file storage and sharing platform. Versions of Anti-Virus for ownCloud prior to 1.2.3 and ownCloud 10 prior to 10.15.3 are affected. The vulnerability allows an attacker with high privileges to induce the server to perform unauthorized requests, potentially compromising confidentiality, integrity, and availability of the system. The CVSS v3.1 base score is 9.1, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and complete impact on confidentiality, integrity, and availability. The vendor has released fixed versions to remediate this issue.

Successful exploitation of this SSRF vulnerability can lead to full compromise of the affected ownCloud server, including unauthorized access to internal resources, data disclosure, modification, or deletion, and potential disruption of service. The vulnerability requires high privileges to exploit but does not require user interaction. The impact is critical, affecting confidentiality, integrity, and availability.

Upgrade Anti-Virus for ownCloud to version 1.2.3 or later. Alternatively, upgrade ownCloud 10 to version 10.15.3 or later. These versions contain fixes that address the SSRF vulnerability. Patch status is confirmed by the vendor advisory indicating these versions as remediated. No additional mitigation steps are indicated.