CVE-2018-1999018

Pydio version 8.2.1 and prior contains an Unvalidated user input leading to Remote Code Execution RCE vulnerability in plugins/action.antivirus/AntivirusScanner.php: Line 124, scanNow$nodeObject that can result in An attacker gaining admin access and can then execute arbitrary commands on the...

CVE-2018-1999018

CVE-2018-1999018 affects Pydio v8.2.1 and earlier. The root cause is unvalidated user input in the AntivirusScanner.php (plugins/action.antivirus/AntivirusScanner.php) function scanNow($nodeObject), enabling Remote Code Execution. The vulnerability can allow an attacker with access to edit the An...