CVEvulnerability
CVE-2023-2979
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-05-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:L/Au:M/C:P/I:P/A:P
- Weaknesses
- CWE-284
Description
A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230211.
Affected configurations
• abstrium pydio cells 4.2.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be Exploit, Third Party Advisory
- https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 Release Notes
- https://vuldb.com/?ctiid.230211 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.230211 Permissions Required, Third Party Advisory, VDB Entry
- https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be Exploit, Third Party Advisory
- https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421 Release Notes
- https://vuldb.com/?ctiid.230211 Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.230211 Permissions Required, Third Party Advisory, VDB Entry