CVE-2021-41323: Path Traversal
Published Sep 30, 2021
·Updated
Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter.
Affected Software
2 affected components
Pydio Cells=2.2.9
Pydio Cells=2.2.9
Event History
Sep 30, 2021
CVE Published
via MITRE·06:48 PM
Data Sourced
via MITRE·06:48 PM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-41323?
CVE-2021-41323 is a directory traversal vulnerability in the Compress feature in Pydio Cells 2.2.9.
2
Who is affected by CVE-2021-41323?
Remote authenticated users of Pydio Cells 2.2.9 are affected by CVE-2021-41323.
3
What can an attacker do with CVE-2021-41323?
An attacker can use CVE-2021-41323 to overwrite personal files or files belonging to any user in Pydio Cells.
4
How severe is CVE-2021-41323?
CVE-2021-41323 has a severity rating of medium (6.5 out of 10).
5
How can I fix CVE-2021-41323?
To fix CVE-2021-41323, update Pydio Cells to version 2.2.12 or later.