CVE-2023-2979

A vulnerability classified as critical has been found in Abstrium Pydio Cells 4.2.0. This affects an unknown part of the component User Creation Handler. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-230211.

• CWE-284

• https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712beExploit, Third Party Advisory
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421Release Notes
• https://vuldb.com/?ctiid.230211Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.230211Permissions Required, Third Party Advisory, VDB Entry
• https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712beExploit, Third Party Advisory
• https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421Release Notes
• https://vuldb.com/?ctiid.230211Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.230211Permissions Required, Third Party Advisory, VDB Entry

Published

May 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29772A Cross-site scripting (XSS) vulnerability in the System Log…5.2
• CVE-2023-29774Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripti…5.4
• CVE-2023-29778GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command I…9.8
• CVE-2023-29779Sengled Dimmer Switch V0.0.9 contains a denial of service (D…7.5
• CVE-2023-2978A vulnerability was found in Abstrium Pydio Cells 4.2.0. It …4.3
• CVE-2023-29780Third Reality Smart Blind 1.00.54 contains a denial-of-servi…7.5
• CVE-2023-29790kodbox 1.2.x through 1.3.7 has a Sensitive Information Leaka…7.5
• CVE-2023-29791kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) v…6.1
• CVE-2023-29798TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to conta…9.8
• CVE-2023-29799TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to conta…9.8
• CVE-2023-2980A vulnerability classified as critical was found in Abstrium…8.8
• CVE-2023-29800TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to conta…9.8