CVE-2023-32751: XSS

Published May 31, 2023
·
Updated

Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript [1]. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it is possible to generate valid signatures for arbitrary download URLs. By uploading an HTML file and modifying the download URL to serve the file inline instead of as an attachment, any included JavaScript code is executed when the URL is opened in a browser, leading to a cross-site scripting vulnerability.

Credit

RedTeam Pentesting GmbH

Affected Software

2 affected components
Pydio Cells<3.0.12
Pydio Cells>=4.1.0<4.1.3

Event History

May 31, 2023
Exploit Published
12:00 AM
Known Exploited
12:00 AM
Jun 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2023-32751?

CVE-2023-32751 is classified as a high severity vulnerability due to its potential for exploiting cross-site scripting (XSS).

2

How do I fix CVE-2023-32751?

To fix CVE-2023-32751, upgrade Pydio Cells to version 4.1.3 or later, which addresses the exposed secrets issue in the JavaScript files.

3

Which versions of Pydio Cells are affected by CVE-2023-32751?

CVE-2023-32751 affects Pydio Cells versions below 4.1.3, including the entire 4.1.0 to 4.1.2 range.

4

What kind of attacks can CVE-2023-32751 facilitate?

CVE-2023-32751 can facilitate cross-site scripting (XSS) attacks, allowing attackers to inject and execute malicious scripts in a user’s browser.

5

Is CVE-2023-32751 a client-side or server-side vulnerability?

CVE-2023-32751 is primarily a client-side vulnerability that affects how user input is handled in the web application.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203