Unrated severityNVD Advisory· Published Jun 4, 2020· Updated Aug 4, 2024
CVE-2020-12851
CVE-2020-12851
Description
Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging the file extraction feature present in the web application. The extracted files will be placed in the targeted user folders.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Pydio/Pydio Cellsdescription
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/158002/Pydio-Cells-2.0.4-XSS-File-Write-Code-Execution.htmlmitrex_refsource_MISC
- www.coresecurity.com/advisoriesmitrex_refsource_MISC
- www.coresecurity.com/core-labs/advisories/pydio-cells-204-multiple-vulnerabilitiesmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.