PT-2023-22428 · Abstrium · Abstrium Pydio Cells

Ignatiusmichael · Published 2023-05-30 · Updated 2024-08-20 · CVE-2023-2981

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Abstrium Pydio Cells version 4.2.0

Description A problematic vulnerability has been found in Abstrium Pydio Cells, affecting the component Chat. This issue leads to basic cross-site scripting and can be initiated remotely. The manipulation affects some unknown processing of the component.

Recommendations For Abstrium Pydio Cells version 4.2.0, upgrade to version 4.2.1 to address this issue. It is recommended to upgrade the affected component.

Exploit

Fix

XSS

Weakness Enumeration

CWE-80

Related Identifiers

CVE-2023-2981

GHSA-WMFC-G86P-FJVR

GO-2023-1809

Affected Products

Abstrium Pydio Cells

References · 13

• 🔥 https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be · Exploit
• https://osv.dev/vulnerability/CVE-2023-2981 · Vendor Advisory
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 · Patch
• https://osv.dev/vulnerability/GHSA-wmfc-g86p-fjvr · Vendor Advisory
• https://osv.dev/vulnerability/GO-2023-1809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2981 · Security Note
• https://github.com/pydio/cells · Note
• https://vuldb.com/?id.230213 · Note
• https://github.com/advisories/GHSA-wmfc-g86p-fjvr · Note
• https://t.me/cvenotify/51368 · Telegram Post
• https://vuldb.com/?ctiid.230213 · Note
• https://t.me/cvenotify/51779 · Telegram Post
• https://t.me/cibsecurity/64785 · Telegram Post