PT-2019-13012
CVE-2019-12903
·
تاريخ النشر
2019-06-19
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Pydio Cells versions prior to 1.5.0
Description
The issue occurs when Pydio Cells is supplied with a Name field in an unexpected Unicode format. It fails to handle this and includes the database column/table name as part of the error message, exposing sensitive information.
Recommendations
For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾