Pydio Core <= 6.0.8 Multiple Vulnerabilities

Pydio Core is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pydio:pydio"; ifdescription...

CVE-2019-15033

CVE-2019-15033 affects Pydio 6.0.8. It enables an authenticated SSRF during a Remote Link Feature download where the attacker can supply an intranet URL in the file parameter to index.php (example: file=http%3A%2F%2F192.168.1.2). The connected documents confirm this vulnerability and its describe...