CVE-2020-12849

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p55

Published

Jun 5, 2020 (Jun 5, 2020)

Modified

Jun 17, 2026

Description

Pydio Cells 2.0.4 allows any user to upload a profile image to the web application, including standard and shared user roles. These profile pictures can later be accessed directly with the generated URL by any unauthenticated or authenticated user.

Vendors: pydio
Products: cells
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.