CVE-2021-41323

Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter...

CVE-2021-41323

CVE-2021-41323 concerns a directory traversal in the Compress feature of Pydio Cells 2.2.9. The issue allows remote authenticated users to overwrite personal files or others’ files via the format parameter. The vulnerability is documented with CVSS metrics (base score 6.5 CVSS-3.1; 4.0 CVSS-2.0) ...