Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database co

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• pydio cellsbefore 1.5.0

Other highest-scoring records for the same primary product.

• CVE-2023-32749Pydio Cells allows users by default to create so-called external users in order to share files with them.
  39Monitor
• CVE-2019-12901Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete file
  35Monitor
• CVE-2020-12851Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositori
  32Monitor
• CVE-2020-12847Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with an administrator ro
  29Monitor
• CVE-2020-12850The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4.
  28Monitor
• CVE-2020-12852The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the
  28Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.