VULNERABILITY INTELLIGENCE
CVE-2021-41323
CVSS score6.5 MEDIUM
EPSS probability2.08%
CISA KEVNot currently listed
Published2021-09-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Description
Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Release Notes, Third Party Advisory
- cve@mitre.org — Product, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory