未評価
Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The...
CVE-2023-32750
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory redteam-pentesting.de
- advisory redteam-pentesting.de