CVE-2020-12849

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-12849
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12849.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-12849
Published
2020-06-05T13:15:10.790Z
Modified
2026-07-08T23:34:23.070058Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles. These profile pictures can later be accessed directly with the generated URL by any unauthenticated or authenticated user.

References

Affected packages

Git / github.com/pydio/cells

Affected ranges

Type
GIT
Repo
https://github.com/pydio/cells
Events
Introduced
07dc2557e3a7099e8bb3b6c7b0dcb4ac80d31601
Last affected
07dc2557e3a7099e8bb3b6c7b0dcb4ac80d31601
Database specific 
{
    "cpe": "cpe:2.3:a:pydio:cells:2.0.4:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.0.4"
        },
        {
            "last_affected": "2.0.4"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.0.4
v2.*
v2.0.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-12849.json"