CVE-2020-12849

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles

published June 5, 2020

CVSS
—
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles. These profile pictures can later be accessed directly with the generated URL by any unauthenticated or authenticated user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Published
2020-06-05T12:52Z
EPSS history
Timeline
  • 05 JUN 12:52Z
    Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles
    cvelistv5