| Package | Affected versions | Patched versions |
|---|---|---|
| pydio | = 6.0.8 |
Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free