CVE-2019-20452

概要

参考情報

• pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-824-security-release · Vendor Advisory
• certilience.fr/2020/03/cve-2019-20452-vulnerabilite-php-object-injection-pydio-core · Third Party Advisory

pydio のその他の脆弱性

• CVE-2024-40124中 5.4Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.
• CVE-2019-20453高 8.8A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/uplo…
• CVE-2013-4267緊急 9.8Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to…
• CVE-2019-15033高 7.7Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file paramet…
• CVE-2019-15032中 5.3Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http:/…