CVE-2023-32751

Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript [1]. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it is possible to generate valid signatures for arbitrary download URLs. By uploading an HTML file and modifying the download URL to serve the file inline instead of as an attachment, any included JavaScript code is executed when the URL is opened in a browser, leading to a cross-site scripting vulnerability.

• CWE-79
• CWE-79

• https://www.redteam-pentesting.de/advisories/rt-sa-2023-004/Exploit, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory
• https://www.redteam-pentesting.de/advisories/rt-sa-2023-004/Exploit, Third Party Advisory
• https://www.redteam-pentesting.de/en/advisories/-advisories-publicised-vulnerability-analysesThird Party Advisory

Published

Jun 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32746Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-32747Authorization Bypass Through User-Controlled Key vulnerabili…7.5
• CVE-2023-32748The Linux DVS server component of Mitel MiVoice Connect thro…9.8
• CVE-2023-32749Pydio Cells allows users by default to create so-called exte…8.8
• CVE-2023-3275A vulnerability classified as critical was found in PHPGuruk…9.8
• CVE-2023-32750Pydio Cells through 4.1.2 allows SSRF. For longer running pr…6.5
• CVE-2023-32752L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file …9.8
• CVE-2023-32753OMICARD EDM’s file uploading function does not restrict uplo…9.8
• CVE-2023-32754Thinking Software Efence login function has insufficient val…9.8
• CVE-2023-32755 e-Excellence U-Office Force generates an error message in w…5.3
• CVE-2023-32756 e-Excellence U-Office Force has a path traversal vulnerabil…7.5
• CVE-2023-32757 e-Excellence U-Office Force file uploading function does no…9.8