CVE-2020-12851

Publication date

2020-06-04 19:17:30

Family

mitre

State

PUBLISHED

Description

Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging the file extraction feature present in the web application. The extracted files will be placed in the targeted user folders.