PT-2023-22428 · Abstrium · Abstrium Pydio Cells

Ignatiusmichael · Publicado 2023-05-30 · Atualizado 2024-08-20 · CVE-2023-2981

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Abstrium Pydio Cells version 4.2.0

Description A problematic vulnerability has been found in Abstrium Pydio Cells, affecting the component Chat. This issue leads to basic cross-site scripting and can be initiated remotely. The manipulation affects some unknown processing of the component.

Recommendations For Abstrium Pydio Cells version 4.2.0, upgrade to version 4.2.1 to address this issue. It is recommended to upgrade the affected component.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-80

Identificadores relacionados

CVE-2023-2981

GHSA-WMFC-G86P-FJVR

GO-2023-1809

Produtos afetados

Abstrium Pydio Cells

Referências · 13

• 🔥 https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be · Exploit
• https://github.com/pydio/cells · Nota
• https://vuldb.com/?id.230213 · Nota
• https://osv.dev/vulnerability/CVE-2023-2981 · Aviso do Fabricante
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 · Correção
• https://github.com/advisories/GHSA-wmfc-g86p-fjvr · Nota
• https://t.me/cvenotify/51368 · Publicação no Telegram
• https://vuldb.com/?ctiid.230213 · Nota
• https://osv.dev/vulnerability/GHSA-wmfc-g86p-fjvr · Aviso do Fabricante
• https://osv.dev/vulnerability/GO-2023-1809 · Aviso do Fabricante
• https://t.me/cvenotify/51779 · Publicação no Telegram
• https://t.me/cibsecurity/64785 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2981 · Nota de Segurança