CVE-2023-2980

CVE-2023-2980 affects Abstrium Pydio Cells 4.2.0. The vulnerability is in the User Creation Handler and enables improper control of resource identifiers, enabling a remote attack. Multiple sources describe it as a critical issue and indicate an upgrade to 4.2.1 addresses the flaw. The disclosed d...

CVE-2023-2978

CVE-2023-2978 affects Abstrium Pydio Cells 4.2.0, with the Change Subscription Handler component enabling an authorization bypass. Multiple sources confirm the issue and state that upgrading to v4.2.1 addresses the vulnerability. The vulnerability is described consistently across sources, noting ...

CVE-2023-2981

CVE-2023-2981 affects Abstrium Pydio Cells 4.2.0, where a vulnerability in the Chat component allows basic cross-site scripting. The issue can be triggered remotely and the exploit has been disclosed publicly. A fix is available in version 4.2.1; upgrading is recommended. The entry is supported b...

CVE-2023-2979

CVE-2023-2979 affects Abstrium Pydio Cells 4.2.0, specifically the User Creation Handler component. The issue enables improper access controls, with a remote-initiated attack described across multiple sources. The exploit has been disclosed publicly, and upgrading to version 4.2.1 is the document...