CVE-2019-20452: High severity pydio cells vulnerability
Published Mar 17, 2020
·Updated
A problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object injection is present in the page plugins/core.access/src/RecycleBinManager.php. An authenticated user with basic privileges can inject objects and achieve remote code execution.
Affected Software
2 affected components
Pydio Pydio<8.2.4
Pydio Pydio<8.2.4
Event History
Mar 17, 2020
CVE Published
via MITRE·01:56 PM
Data Sourced
via MITRE·01:56 PM
Description
Frequently Asked Questions
1
What is CVE-2019-20452?
CVE-2019-20452 is a vulnerability found in Pydio Core and Pydio Enterprise versions before 8.2.4.
2
What is the severity of CVE-2019-20452?
The severity of CVE-2019-20452 is high with a CVSS score of 8.8.
3
How does CVE-2019-20452 impact Pydio Core and Pydio Enterprise?
CVE-2019-20452 allows an authenticated user with basic privileges to inject PHP objects and achieve remote code execution.
4
Which versions of Pydio Core and Pydio Enterprise are affected by CVE-2019-20452?
Pydio Core and Pydio Enterprise versions before 8.2.4 are affected by CVE-2019-20452.
5
How can I fix CVE-2019-20452 in Pydio Core and Pydio Enterprise?
To fix CVE-2019-20452, it is recommended to update to Pydio Core and Pydio Enterprise version 8.2.4 or later.