CVE-2024-40124

Mô tả

Tham khảo

• gist.github.com/Xib3rR4dAr/711195d5793bfbb4364dc179ecaae25d · Exploit
• pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-825-hotfix-824 · Patch

Lỗ hổng khác của pydio

• CVE-2019-20453CAO 8.8A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/uplo…
• CVE-2019-20452CAO 8.8A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core…
• CVE-2013-4267NGHIÊM TRỌNG 9.8Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to…
• CVE-2019-15033CAO 7.7Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file paramet…
• CVE-2019-15032TRUNG BÌNH 5.3Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http:/…