PT-2023-22418 · Abstrium · Abstrium Pydio Cells

Ignatiusmichael · Published 2023-05-30 · Updated 2024-05-17 · CVE-2023-2979

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Abstrium Pydio Cells version 4.2.0

Description A critical issue has been found in the User Creation Handler component, leading to improper access controls. The attack can be initiated remotely. Upgrading to version 4.2.1 addresses this issue.

Recommendations For Abstrium Pydio Cells version 4.2.0, upgrade to version 4.2.1 to resolve the issue.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-2979

Affected Products

Abstrium Pydio Cells

References · 8

• 🔥 https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be · Exploit
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-2979 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2979 · Vendor Advisory
• https://t.me/cvenotify/51359 · Telegram Post
• https://t.me/cvenotify/51777 · Telegram Post
• https://vuldb.com/?id.230211 · Note
• https://vuldb.com/?ctiid.230211 · Note