Pydio Cells 4.1.2 Privilege Escalation - KizzMyAnthia.com
Advisory: Pydio Cells: Unauthorised Role AssignmentsPydio Cells allows users by default to create so-called external usersin order to share files with them. By modifying the HTTP request sentwhen creating such an external user, it is possible to assign the newuser arbitrary roles. By assigning all roles to a newly created user, access toall cells and
Source: kizzmyanthia.com