VYPR
Medium severity6.5NVD Advisory· Published Jun 8, 2023· Updated Jun 17, 2026

CVE-2023-32750

CVE-2023-32750

Description

Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • cpe:2.3:a:pydio:cells:*:*:*:*:*:*:*:*
    Range: <3.0.12
  • Pydio/Cellsdescription
  • Pydio/Pydiollm-fuzzy
    Range: <=4.1.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.