CVE-2025-53830 is a critical Server-Side Request Forgery (SSRF) vulnerability affecting Anti-Virus for ownCloud and ownCloud 10. Specifically, versions of Anti-Virus for ownCloud before 1.2.3 and ownCloud 10 prior to 10.15.3 are vulnerable. The SSRF flaw allows an attacker with high privileges to coerce the server into making unauthorized network requests, which can lead to a complete compromise of confidentiality, integrity, and availability of the affected system. The vulnerability is identified as CWE-918 and carries a CVSS 3.1 base score of 9.1, indicating critical severity. No known exploits in the wild have been reported at the time of publication. The vendor has released fixed versions to address this issue.

Successful exploitation of this SSRF vulnerability can result in full compromise of the affected system's confidentiality, integrity, and availability. An attacker with high privileges can cause the server to make arbitrary requests, potentially accessing internal resources or services not otherwise accessible, leading to data exposure, manipulation, or denial of service.

Upgrade Anti-Virus for ownCloud to version 1.2.3 or later. Alternatively, upgrade ownCloud 10 to version 10.15.3 or later. These versions contain fixes that address the SSRF vulnerability. Patch status is confirmed by the vendor advisory indicating these versions as fixed. No additional mitigation actions are specified or required beyond applying these updates.