CVE-2023-32750

概要

参考情報

• redteam-pentesting.de/advisories/rt-sa-2023-005 · Exploit
• redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses · Third Party Advisory

cells のその他の脆弱性

• CVE-2023-32751中 5.4Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon…
• CVE-2023-32749高 8.8Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent…
• CVE-2021-41324中 6.5Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal file…
• CVE-2021-41325中 6.5Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile paramete…
• CVE-2021-41323中 6.5Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells fil…