Critical severity9.8NVD Advisory· Published Sep 19, 2017· Updated Jun 17, 2026

CVE-2015-3431

Description

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."

Affected products

Pydio/Pydio2 versions
cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*range: <=6.0.6
- (no CPE)range: <6.0.7

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/74596nvdThird Party AdvisoryVDB Entry
pydio.com/en/community/releases/pydio-core/pydio-607-security-releasenvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000