CVE-2023-32750

Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.

• CWE-918
• CWE-918

• https://www.redteam-pentesting.de/advisories/rt-sa-2023-005/Exploit, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory
• https://www.redteam-pentesting.de/advisories/rt-sa-2023-005/Exploit, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory

Published

Jun 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32745Cross-Site Request Forgery (CSRF) vulnerability in WooCommer…8.8
• CVE-2023-32746Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-32747Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-32748The Linux DVS server component of Mitel MiVoice Connect thro…9.8
• CVE-2023-32749Pydio Cells allows users by default to create so-called exte…8.8
• CVE-2023-3275A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2023-32751Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements…5.4
• CVE-2023-32752L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file …9.8
• CVE-2023-32753OMICARD EDM’s file uploading function does not restrict uplo…9.8
• CVE-2023-32754Thinking Software Efence login function has insufficient val…9.8
• CVE-2023-32755 e-Excellence U-Office Force generates an error message in w…5.3
• CVE-2023-32756 e-Excellence U-Office Force has a path traversal vulnerabil…7.5