未評価
Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by upl...
CVE-2020-12851
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging the file extraction feature present in the web application. The extracted files will be placed in the targeted user folders.
参照URL
- advisory packetstormsecurity.com
- advisory coresecurity.com
- report coresecurity.com