1437 matches found
CVE-2023-3305 C-DATA Web Management System User Creation access control
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=configsave&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword...
PT-2023-5239 · Unknown · C-Data Web Management System
Name of the Vulnerable Software and Affected Versions: C-DATA Web Management System up to 20230607 Description: A critical issue affects the User Creation Handler component of the C-DATA Web Management System, specifically the file /cgi-bin/jumpto.php?class=user&page=config save&isphp=1. The...
CVE-2023-32749
Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all...
Resource Injection
github.com/pydio/cells is vulnerable to Resource Injection. The vulnerability exists due to a lack of a validation in the user creation handler, which allows an attacker to inject and execute arbitrary code into the system...
Create multiple user with the same username (Race Condition)
Description Administrator users can create multiple users with the same username which breaks the logic of the web application. Proof of Concept Step 1: At AdministrationUser ManagementManager User Screen, click on "New Local User" button Step 2: Fill in all the required fields, notice that the...
Add user with useradd
Creates a new user. By default the new user is set with sudo but other options exist to make the new user automatically root but this is not automatically set since the new user will be treated as root and login may be difficult. The new user can also be set as just a standard user if desired...
Improper Access Control
github.com/pydio/cells is vulnerable to Improper Access Control. The vulnerability exists in the User Creation Handler component which allows an attacker to gain access to the system and perform unauthorized actions...
GHSA-J327-C69H-4GH8 Abstrium Pydio Cells Resource Injection vulnerability
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 4.2.1 is...
Abstrium Pydio Cells Resource Injection vulnerability
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 4.2.1 is...
CVE-2023-2980
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...
CVE-2023-2980
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...
CVE-2023-2980 Abstrium Pydio Cells User Creation resource injection
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...
CVE-2023-2980 Abstrium Pydio Cells User Creation resource injection
A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...
CVE-2023-2979
A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2023-2979
A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
Improper access control
A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2023-2979 Abstrium Pydio Cells User Creation access control
A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
PT-2023-22418 · Abstrium · Abstrium Pydio Cells
Name of the Vulnerable Software and Affected Versions: Abstrium Pydio Cells version 4.2.0 Description: A critical issue has been found in the User Creation Handler component, leading to improper access controls. The attack can be initiated remotely. Upgrading to version 4.2.1 addresses this issue...
PT-2023-22421 · Abstrium · Abstrium Pydio Cells
Name of the Vulnerable Software and Affected Versions: Abstrium Pydio Cells version 4.2.0 Description: A critical vulnerability was found in the User Creation Handler component, leading to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 4.2.1 i...
