CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:M/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
71.3%
github.com/pydio/cells is vulnerable to Improper Access Control. The vulnerability exists in the User Creation Handler component which allows an attacker to gain access to the system and perform unauthorized actions.
github.com/advisories/GHSA-q95j-v3x6-rpg3
github.com/pydio/cells/commit/04a908997139f20b6fb3236d162020ba8fb504a2
popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be
pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421
vuldb.com/?ctiid.230211
vuldb.com/?id.230211
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
MULTIPLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:M/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
71.3%