CVE-2020-12853

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTML and JavaScript code to personal folders or accessible cells.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 4, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-128548.8A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code executioCVE-2020-128558.8A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this heaCVE-2020-128569.8OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote atCVE-2020-128577.5Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an AndroidCVE-2020-128587.5Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify AndrCVE-2020-128595.3Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by obCVE-2020-12868.8A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully exploCVE-2020-128605.3COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and CCVE-2020-128618.8A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to executeCVE-2020-128624.3An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read CVE-2020-128634.3An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read CVE-2020-128644.3An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read
CVE-2020-12853: Medium severity, CVSS 6.1 | Vulnix