Target Policy

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• owncloud/user_ldap

  ---

  Code from: https://github.com/owncloud/user_ldap
  This application enables administrators to connect ownCloud to an LDAP-based user directory for authentication and provisioning users, groups and user attributes. Admins can configure this application to connect to one or more LDAP directories or Active Directories via an LDAP interface. Attributes such as user quota, email, avatar pictures, group memberships and more can be pulled into ownCloud from a directory with the appropriate queries and filters.

  SOURCE_CODE

  critical
• owncloud.iosapp

  ---

  Our official iOS client from https://apps.apple.com/app/id1359583808
  Source: https://github.com/owncloud/ios-app
  Note that the ownCloud server itself is considered a trusted endpoint in our threat model and an eligible vulnerability must not rely on a malicious ownCloud instance.

  APPLE_STORE_APP_ID

  medium
• owncloud/guests

  ---

  Code from: https://github.com/owncloud/guests
  Create a guest user by typing his name in to the sharing dialog. The guest will receive an email invite with a link to create an account. He only has access to files which are shared with him.

  SOURCE_CODE

  critical
• owncloud/richdocuments

  ---

  Code from: https://github.com/owncloud/richdocuments
  Collabora Online for ownCloud provides collaborating editing functions for text documents, spreadsheets and presentations inside ownCloud for improved productivity.

  SOURCE_CODE

  critical
• owncloud/activity

  ---

  Code from: https://github.com/owncloud/activity
  Provides an activity feed showing your file changes and other interesting things going on in your ownCloud.

  SOURCE_CODE

  critical
• com.owncloud.android

  ---

  Our official Android client from https://play.google.com/store/apps/details?id=com.owncloud.android.
  Source: https://github.com/owncloud/android
  Note that the ownCloud server itself is considered a trusted endpoint in our threat model and an eligible vulnerability must not rely on a malicious ownCloud instance.

  GOOGLE_PLAY_APP_ID

  medium
• owncloud/customgroups

  ---

  Code from: https://github.com/owncloud/customgroups
  This apps makes it possible for users to create their own custom groups and manage members. It is then possible to share files or folders with these groups.

  SOURCE_CODE

  critical
• Desktop Client

  ---

  Issues affecting the Desktop Client available from https://owncloud.org/install/#install-clients
  Source: https://github.com/owncloud/client
  Note that the ownCloud server itself is considered a trusted endpoint in our threat model and an eligible vulnerability must not rely on a malicious ownCloud instance.

  DOWNLOADABLE_EXECUTABLES

  critical
• owncloud/core

  ---

  Code from: https://github.com/owncloud/core
  This is our core server software, which is "the heart" of owncloud.
  Note that some folders such as tests and so on will not be packaged. Please make sure that the referenced file is thus also existent in our final releases.

  SOURCE_CODE

  critical
• owncloud/files

  ---

  Code from: https://github.com/owncloud/core/tree/master/apps/files
  This is the app for owncloud file management.

  SOURCE_CODE

  critical
• owncloud/notifications

  ---

  Code from: https://github.com/owncloud/notifications
  Notification backend and UI for the notification panel/icon. Used for notifications of other apps (announcementcenter, federatedfilesharing etc.)

  SOURCE_CODE

  critical
• owncloud/gallery

  ---

  Code from: https://github.com/owncloud/gallery
  Media gallery for ownCloud which includes previews for all media types supported by your installation.
  Provides a dedicated view of all images in a grid, adds image viewing capabilities to the files app and adds a gallery view to public links.

  SOURCE_CODE

  critical
• owncloud/updater

  ---

  Code from: https://github.com/owncloud/updater

  SOURCE_CODE

  critical
• *.owncloud.com

  WILDCARD

  none
• *.owncloud.org

  WILDCARD

  none
• https://github.com/owncloud/ocis

  ---

  Code from: https://github.com/owncloud/ocis
  This is next generation server software, which is "the new heart" of owncloud.
  Note that some folders such as tests and so on will not be packaged. Please make sure that the referenced file is thus also existent in our final releases.

  SOURCE_CODE

  critical
• owncloud/oauth2

  ---

  Code from: https://github.com/owncloud/oauth2
  Application for using OAuth 2.0 in ownCloud

  SOURCE_CODE

  critical

• 72 Subdomains
• 141 Endpoints
• Download wordlist

Last Finished Scan: