GCVE - cpe:2.3:a:pydio:cells:2.2.9:*:*:*:enterprise:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pydio:cells:2.2.9:*:*:*:enterprise:*:*:*

part: a version: 2.2.9 update: *

Vendor	Pydio (`08ebd1f1-c9a4-5b4e-9bb7-6e1d89420153`)
Product	Cells (`3e36df53-fdb6-5ea2-a5d4-b7e6e1555932`)
Edition	*
Language	*
Software edition	enterprise
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:docker/pydio/cells`	purl2cpe	2026-06-01 10:14:39.747974
`pkg:github/pydio/cells`	purl2cpe	2026-06-01 10:14:39.747976

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-41325`	vulnerable	2026-06-08 05:35:20.220604	Details available Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter. (In addition, such users can be granted several admin permissions via the Roles parameter.) Published: 2021-09-30T18:52:32.000Z Updated: 2024-08-04T03:08:32.014Z Open on db.gcve.eu Reference links https://pydio.com/fr/community/releases/pydio-cells/pydio-cells-enterprise-2212 https://github.com/pydio/cells/releases/tag/v2.2.12 https://charonv.net/Pydio-Broken-Access-Control/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41324`	vulnerable	2026-06-08 05:35:20.220043	Details available Directory traversal in the Copy, Move, and Delete features in Pydio Cells 2.2.9 allows remote authenticated users to enumerate personal files (or Cells files belonging to any user) via the nodes parameter (for Copy and Move) or via the Path parameter (for Delete). Published: 2021-09-30T20:39:57.000Z Updated: 2024-08-04T03:08:32.026Z Open on db.gcve.eu Reference links https://pydio.com/fr/community/releases/pydio-cells/pydio-cells-enterprise-2212 https://github.com/pydio/cells/releases/tag/v2.2.12 https://charonv.net/Pydio-Broken-Access-Control/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-41323`	vulnerable	2026-06-08 05:35:20.219587	Details available Directory traversal in the Compress feature in Pydio Cells 2.2.9 allows remote authenticated users to overwrite personal files, or Cells files belonging to any user, via the format parameter. Published: 2021-09-30T18:48:46.000Z Updated: 2024-08-04T03:08:32.017Z Open on db.gcve.eu Reference links https://pydio.com/fr/community/releases/pydio-cells/pydio-cells-enterprise-2212 https://github.com/pydio/cells/releases/tag/v2.2.12 https://charonv.net/Pydio-Broken-Access-Control/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.