Unrated severityNVD Advisory· Published Mar 17, 2020· Updated Aug 5, 2024

CVE-2019-20452

Description

A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pydio/Pydio Coredescription
Pydio/Pydiollm-fuzzy
Range: <8.2.4
Pydio/Pydio Corellm-fuzzy
Range: <8.2.4

Patches

Vulnerability mechanics

References

pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-824-security-releasemitrex_refsource_MISC
www.certilience.fr/2020/03/cve-2019-20452-vulnerabilite-php-object-injection-pydio-core/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000