Known Vulnerabilities for products from Pydio

Listed below are 20 of the newest known vulnerabilities associated with the vendor "Pydio".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2023-32751 json Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated u... 5.4 - MEDIUM 2023-06-08 2023-06-16
CVE-2023-32750 json Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are r... 6.5 - MEDIUM 2023-06-08 2023-06-16
CVE-2023-32749 json Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HT... 8.8 - HIGH 2023-06-08 2023-06-15
CVE-2021-41325 json Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the p... 6.5 - MEDIUM 2021-09-30 2022-07-12
CVE-2021-41324 json Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerat... 6.5 - MEDIUM 2021-09-30 2021-10-07
CVE-2021-41323 json Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal file... 6.5 - MEDIUM 2021-09-30 2021-10-07
CVE-2020-12853 json Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTM... 6.1 - MEDIUM 2020-06-04 2020-06-10
CVE-2020-12852 json The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used ... 6.8 - MEDIUM 2020-06-04 2020-06-12
CVE-2020-12851 json Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells fo... 8.1 - HIGH 2020-06-04 2021-07-21
CVE-2020-12850 json The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior versions of the Pydio Cells E... 7 - HIGH 2020-06-11 2020-06-22
CVE-2020-12849 json Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles.... 5.4 - MEDIUM 2020-06-05 2020-06-12
CVE-2020-12848 json In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shared use... 5.4 - MEDIUM 2020-06-05 2021-07-21
CVE-2020-12847 json Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with ... 7.2 - HIGH 2020-06-04 2021-07-21
CVE-2019-20453 json A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the pa... 8.8 - HIGH 2020-03-17 2020-08-24
CVE-2019-20452 json A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the pa... 8.8 - HIGH 2020-03-17 2020-08-24
CVE-2019-15033 json Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in t... 7.7 - HIGH 2019-09-19 2019-09-20
CVE-2019-15032 json Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used ... 5.3 - MEDIUM 2019-09-19 2019-09-19
CVE-2019-12903 json Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes ... 4.3 - MEDIUM 2019-06-20 2021-07-21
CVE-2019-12902 json Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a new user, holding the same Use... 6.5 - MEDIUM 2019-06-20 2021-07-21
CVE-2019-12901 json Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, ... 8.8 - HIGH 2019-06-20 2020-08-24
Results limited to 20 most recent vulnerabilities

Known software with vulnerabilities from Pydio

Type Vendor Product Version
ApplicationPydioCells0.9.0
ApplicationPydioPydio2.2.1

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report