← All advisories

Medium severity5.4NVD Advisory· Published Apr 17, 2025· Updated Jun 17, 2026

CVE-2024-40124

CVE-2024-40124

Description

Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Pydio/Pydio
cpe:2.3:a:pydio:pydio:*:*:*:*:*:*:*:*
Range: <=8.2.5
Pydio/Pydio Corecpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=8.2.5

Patches

Vulnerability mechanics

References

2

pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-825-hotfix-824nvdPatch
gist.github.com/Xib3rR4dAr/711195d5793bfbb4364dc179ecaae25dnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.