Unscored CVE-2021-41323 EUVD-2021-28352GHSA-fx39-83hx-w7vp

Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells fi…

Published Sep 30, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter.

References

https://pydio.com/fr/community/releases/pydio-cells/pydio-cells-enterprise-2212
https://github.com/pydio/cells/releases/tag/v2.2.12
https://charonv.net/Pydio-Broken-Access-Control/