CVE-2021-41325

概要

参考情報

• charonv.net/Pydio-Broken-Access-Control · Third Party Advisory
• pydio/cells release v2.2.12 · Release Notes
• pydio.com/fr/community/releases/pydio-cells/pydio-cells-enterprise-2212 · Product

cells のその他の脆弱性

• CVE-2023-32751中 5.4Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon…
• CVE-2023-32750中 6.5Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the backg…
• CVE-2023-32749高 8.8Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent…
• CVE-2021-41324中 6.5Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal file…
• CVE-2021-41323中 6.5Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells fil…