CVE-2019-12902

概要

参考情報

• pydio.com/en/community/releases/pydio-cells/pydio-cells-150-performances-features-security · Vendor Advisory
• research.loginsoft.com/vulnerability/multiple-vulnerabilities-in-pydio-cells-1-4-1 · Release Notes

cells のその他の脆弱性

• CVE-2023-32751中 5.4Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon…
• CVE-2023-32750中 6.5Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the backg…
• CVE-2023-32749高 8.8Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent…
• CVE-2021-41324中 6.5Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal file…
• CVE-2021-41325中 6.5Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile paramete…