Description
The Docker image of ownCloud Server through 10.11 contains a misconfiguration that renders the trusted_domains config useless. This could be abused to spoof the URL in password-reset e-mail messages.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce PDF Invoices & Packing Slips Cross-Site Request Forgery (2.2.6)
Moodle Exposure of Sensitive Information Through Metadata Vulnerability (CVE-2025-26527)
WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2007-4893)
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.6.7)
TYPO3 Improper Input Validation Vulnerability (CVE-2010-3667)