Its important to emphasize that simply disabling the graphapi app does not eliminate the vulnerability.

owncloud vulnerable

spot_img

source: www.techworm.net