Vulnerabilities > Pydio > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-08 CVE-2023-32749 Incorrect Authorization vulnerability in Pydio Cells
Pydio Cells allows users by default to create so-called external users in order to share files with them.
network
low complexity
pydio CWE-863
8.8
2020-06-04 CVE-2020-12852 Improper Input Validation vulnerability in Pydio Cells 2.0.4
The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the downloaded update package.
network
pydio CWE-20
8.5
2019-06-05 CVE-2019-9642 Unrestricted Upload of File with Dangerous Type vulnerability in Pydio
An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2.
network
low complexity
pydio CWE-434
7.5
2018-07-23 CVE-2018-1999018 Improper Input Validation vulnerability in Pydio
Pydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution (RCE) vulnerability in plugins/action.antivirus/AntivirusScanner.php: Line 124, scanNow($nodeObject) that can result in An attacker gaining admin access and can then execute arbitrary commands on the underlying OS.
network
pydio CWE-20
8.5