Pydio vulnerabilities

Products

• Pydio 20
• Cells 17

Newest

• pydio cells Pydio Cells 5.0.0 to 5.0.2 - Missing Authorization on the Share Link REST Handler CVE-2026-76032 5.3 MediumAugust 18, 2026
• pydio Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature. CVE-2024-40124 5.4 MediumApril 17, 2025
• pydio cells Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using... CVE-2023-32751 Public exploit 5.4 MediumJune 8, 2023
• pydio cells Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the... CVE-2023-32750 Public exploit 6.5 MediumJune 8, 2023
• pydio cells Pydio Cells allows users by default to create so-called external users in order to share files... CVE-2023-32749 Public exploit EPSS 14.1% 8.8 HighJune 8, 2023
• pydio cells Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote... CVE-2021-41324 6.5 MediumSeptember 30, 2021
• pydio cells Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to... CVE-2021-41325 6.5 MediumSeptember 30, 2021
• pydio cells Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated... CVE-2021-41323 6.5 MediumSeptember 30, 2021
• pydio cells The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4. Prior... CVE-2020-12850 7.0 HighJune 11, 2020
• pydio cells In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link... CVE-2020-12848 5.4 MediumJune 5, 2020
• pydio cells Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including... CVE-2020-12849 5.4 MediumJune 5, 2020
• pydio cells Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is... CVE-2020-12847 7.2 HighJune 4, 2020
• pydio cells Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another... CVE-2020-12851 8.1 HighJune 4, 2020
• pydio cells The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL... CVE-2020-12852 6.8 MediumJune 4, 2020
• pydio cells Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that... CVE-2020-12853 6.1 MediumJune 4, 2020
• pydio A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object... CVE-2019-20453 8.8 HighMarch 17, 2020
• pydio A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object... CVE-2019-20452 8.8 HighMarch 17, 2020
• pydio Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell... CVE-2013-4267 9.8 CriticalFebruary 11, 2020
• pydio Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can... CVE-2019-15033 7.7 HighSeptember 19, 2019
• pydio Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the... CVE-2019-15032 5.3 MediumSeptember 19, 2019
• pydio cells Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails... CVE-2019-12903 4.3 MediumJune 19, 2019
• pydio cells Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion. This allows a... CVE-2019-12902 6.5 MediumJune 19, 2019
• pydio cells Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum... CVE-2019-12901 8.8 HighJune 19, 2019
• pydio An issue was discovered in proxy.php in pydio-core in Pydio through 8.2.2. Through an... CVE-2019-9642 9.8 CriticalJune 5, 2019
• pydio It is possible for an attacker with regular user access to the web application of Pydio through 8... CVE-2019-10049 7.3 HighMay 31, 2019
• pydio The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the... CVE-2019-10048 7.2 HighMay 31, 2019
• pydio PyDio Stored XSS Vulnerability CVE-2019-10047 5.4 MediumMay 31, 2019
• pydio An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including... CVE-2019-10046 5.3 MediumMay 31, 2019
• pydio The "action" get_sess_id in the web application of Pydio through 8.2.2 discloses the session... CVE-2019-10045 6.5 MediumMay 31, 2019
• pydio In Pydio before 8.2.2, an attack is possible via PHP Object Injection because a user is allowed... CVE-2018-20718 Public exploit 9.8 CriticalJanuary 15, 2019
• pydio Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an... CVE-2018-14772 Public exploit 7.2 HighOctober 16, 2018
• pydio Pydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution... CVE-2018-1999018 6.6 MediumJuly 23, 2018
• pydio Pydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in... CVE-2018-1999017 4.9 MediumJuly 23, 2018
• pydio Pydio version 8.2.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in ./core... CVE-2018-1999016 6.1 MediumJuly 23, 2018
• pydio Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7... CVE-2015-3432 6.1 MediumSeptember 19, 2017
• pydio Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands... CVE-2015-3431 9.8 CriticalSeptember 19, 2017
• ajaxplorer, pydio +1 more Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho... CVE-2013-6227 Public exploit 7.5 HighDecember 27, 2014