Published: 08/06/2023 Updated: 16/06/2023

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 0

Pydio Cells up to and including 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript [1]. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it is possible to generate valid signatures for arbitrary download URLs. By uploading an HTML file and modifying the download URL to serve the file inline instead of as an attachment, any included JavaScript code is executed when the URL is opened in a browser, leading to a cross-site scripting vulnerability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pydio cells

Pydio Cells versions 412 and below implement the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application Therefore, it is possible to generate valid signatures for arbitrary download URLs ...

CWE-79 https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analyses https://www.redteam-pentesting.de/advisories/rt-sa-2023-004/https://nvd.nist.gov https://packetstormsecurity.com/files/172646/Pydio-Cells-4.1.2-Cross-Site-Scripting.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-32751

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect