CVE-2018-14772

Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2018-10-16

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Pydio (Pydio)

References

• http://coastalsec.io/cve-2018-14772-remote-code-execution