Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rchv-vfvq-x3hp

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.

EPSS

Процентиль: 63%
0.00438
Низкий

Связанные уязвимости

CVSS3: 5.3
nvd
больше 6 лет назад

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.

CVSS3: 5.3
debian
больше 6 лет назад

Pydio 6.0.8 mishandles error reporting when a directory allows unauthe ...

EPSS

Процентиль: 63%
0.00438
Низкий