Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-40124

Pydio Core <= 8.2.5 is vulnerable to Cross Site Scripting (XSS) via the New URL Bookmark feature.

Published

2025-04-17T17:15:31.853

Last Modified

2025-06-25T18:49:27.920

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses

Type: Secondary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	pydio	pydio	≤ 8.2.5	Yes

References

https://gist.github.com/Xib3rR4dAr/711195d5793bfbb4364dc179ecaae25d Exploit, Third Party Advisory ([email protected])
https://pydio.com/en/community/releases/pydio-core/pydio-core-pydio-enterprise-825-hotfix-824 Patch ([email protected])
https://gist.github.com/Xib3rR4dAr/711195d5793bfbb4364dc179ecaae25d Exploit, Third Party Advisory (134c704f-9b21-4f2e-91b3-4a467353bcc0)