Lucene search

CVE-2018-1999017

🗓️ 23 Jul 2018 15:00:29Reported by [email protected]Type

Pydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in UpgradeManager.php that allows authenticated admin users to request arbitrary URLs, potentially resulting in unauthorized server requests

Reporter	Title	Published	Views	Family All 4
Prion	Server side request forgery (ssrf)	23 Jul 201815:29	–	prion
Cvelist	CVE-2018-1999017	23 Jul 201815:00	–	cvelist
OSV	CVE-2018-1999017	23 Jul 201815:29	–	osv
CVE	CVE-2018-1999017	23 Jul 201815:29	–	cve

Nvd

Node

pydio pydioRange≤8.2.0

Source	Link
pydio	www.pydio.com/en/community/releases/pydio-core/pydio-821-security-release
mike-gualtieri	www.mike-gualtieri.com/files/Pydio-8-VulnerabilityDisclosure-Jul18.txt

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Jul 2018 15:29Current

5.3Medium risk

Vulners AI Score5.3

CVSS24

CVSS34.9

EPSS0.00352

CWE-918