Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x5fh-8hmh-2c57

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.

A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.

EPSS

Процентиль: 89%
0.04371
Низкий

Связанные уязвимости

CVSS3: 8.8
nvd
почти 6 лет назад

A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.

CVSS3: 8.8
debian
почти 6 лет назад

A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise be ...

EPSS

Процентиль: 89%
0.04371
Низкий