Pydio CVE-2024-40124

Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly

Pydio Cells allows users by default to create so-called external users in order to share files with them. Rated high sev

Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells

Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. Rated high severity (CVSS 7.7), this vulner

It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an admini

Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with

The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation a

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors,

The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Rated high severity (CVSS 7.0)

The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key

Pydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution (RCE) vulnerability in

Pydio Cells through 4.1.2 allows SSRF. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low