Note that Docker-Containers from before February 2023 are not vulnerable to the credential disclosure.

I haven’t seen this posted yet here, but anybody self-hosting OwnCloud in a containerized environment may be exposing sensitive environment variables to the public internet. There may be other implications as well.

  • deepdive@lemmy.worldEnglish
    61·
    2 years ago

    That’s way exposing your home services to the internet is a bad idea. Accessing it through a secure tunnel is the way to go.

    Also, they already “fixed” the docker image with an update, something todo with phpinfo…