CVE-2023-32750

Source
https://cve.org/CVERecord?id=CVE-2023-32750
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32750.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-32750
Published
2023-06-08T21:15:17.340Z
Modified
2025-11-15T06:33:26.468891Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.

References

Affected packages

Git / github.com/pydio/cells

Affected ranges

Type
GIT
Repo
https://github.com/pydio/cells
Events

Affected versions

v4.*
v4.1.0
v4.1.1
v4.1.2
v4.1.3-alpha1

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-32750.json"