Security Advisory

CVE-2020-12849

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-06-05 12:52:29

Last updated 2024-08-04 12:04:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles. These profile pictures can later be accessed directly with the generated URL by any unauthenticated or authenticated user.

← Browse all CVEs View on cve.org ↗