CVE-2021-41325

Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter

published September 30, 2021

CVSS
—
EPSS
1%
Percentile
66.5
In the wild
Unconfirmed
What it is

Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter. (In addition, such users can be granted several admin permissions via the Roles parameter.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01146 · 66.5th percentile
Published
2021-09-30T18:52Z
EPSS history
Timeline
  • 30 SEP 18:52Z
    Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter
    cvelistv5