CVE-2018-14772

—

CVSS 3.0

7.2 high

EPSS

7%p93

Published

Oct 16, 2018 (Oct 16, 2018)

Modified

Jun 17, 2026

Description

Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection.

Vendors: pydio
Products: pydio
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.6%)

In the news0 stories

No ingested article mentions this CVE yet.