CVE-2023-32749

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all cells and non-personal workspaces is granted.

• CWE-863
• CWE-863

• http://packetstormsecurity.com/files/172645/Pydio-Cells-4.1.2-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/May/18Exploit, Mailing List, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory
• https://www.redteam-pentesting.de/en/advisories/rt-sa-2023-003/-pydio-cells-unauthorised-role-assignmentsExploit, Third Party Advisory
• http://packetstormsecurity.com/files/172645/Pydio-Cells-4.1.2-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2023/May/18Exploit, Mailing List, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory
• https://www.redteam-pentesting.de/en/advisories/rt-sa-2023-003/-pydio-cells-unauthorised-role-assignmentsExploit, Third Party Advisory

Published

Jun 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32743Improper Neutralization of Special Elements used in an SQL C…4.9
• CVE-2023-32744Cross-Site Request Forgery (CSRF) vulnerability in WooCommer…8.8
• CVE-2023-32745Cross-Site Request Forgery (CSRF) vulnerability in WooCommer…8.8
• CVE-2023-32746Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-32747Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-32748The Linux DVS server component of Mitel MiVoice Connect thro…9.8
• CVE-2023-3275A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2023-32750Pydio Cells through 4.1.2 allows SSRF. For longer running pr…6.5
• CVE-2023-32751Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements…5.4
• CVE-2023-32752L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file …9.8
• CVE-2023-32753OMICARD EDM’s file uploading function does not restrict uplo…9.8
• CVE-2023-32754Thinking Software Efence login function has insufficient val…9.8