CVE-2023-2981: Abstrium Pydio Cells Chat cross site scripting

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-05-30 · updated 2026-06-17
Weakness: CWE-80

Description

A vulnerability, which was classified as problematic, has been found in Abstrium Pydio Cells 4.2.0. This issue affects some unknown processing of the component Chat. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-230213 was assigned to this vulnerability.

Affected products

Abstrium Pydio Cells: 4.2.0

References

https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be
https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421
https://vuldb.com/?ctiid.230213
https://vuldb.com/?id.230213
https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be
https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421
https://vuldb.com/?ctiid.230213
https://vuldb.com/?id.230213

Get alerted when CVE-2023-2981 or the next vulnerability affects your stack