PT-2023-22418 · Abstrium · Abstrium Pydio Cells

Ignatiusmichael · Publicado 2023-05-30 · Atualizado 2024-05-17 · CVE-2023-2979

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Abstrium Pydio Cells version 4.2.0

Description A critical issue has been found in the User Creation Handler component, leading to improper access controls. The attack can be initiated remotely. Upgrading to version 4.2.1 addresses this issue.

Recommendations For Abstrium Pydio Cells version 4.2.0, upgrade to version 4.2.1 to resolve the issue.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2023-2979

Produtos afetados

Abstrium Pydio Cells

Referências · 8

• 🔥 https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be · Exploit
• https://t.me/cvenotify/51359 · Publicação no Telegram
• https://t.me/cvenotify/51777 · Publicação no Telegram
• https://vuldb.com/?id.230211 · Nota
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-2979 · Nota de Segurança
• https://vuldb.com/?ctiid.230211 · Nota
• https://osv.dev/vulnerability/CVE-2023-2979 · Aviso do Fabricante