CVE-2020-12849

概要

参考情報

• packetstormsecurity.com/files/158002/Pydio-Cells-2.0.4-XSS-File-Write-Code-Execution.html · Exploit
• coresecurity.com/advisories · Third Party Advisory
• coresecurity.com/core-labs/advisories/pydio-cells-204-multiple-vulnerabilities · Third Party Advisory

cells のその他の脆弱性

• CVE-2023-32751中 5.4Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon…
• CVE-2023-32750中 6.5Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the backg…
• CVE-2023-32749高 8.8Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent…
• CVE-2021-41324中 6.5Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal file…
• CVE-2021-41325中 6.5Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile paramete…