CVE-2021-41325
Medium
Published: 30 September 2021
Published
30 September 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.0021
43.4th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-41325 is a medium-severity an unspecified weakness vulnerability in Pydio Cells. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 43.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-28354
Vulnerability details
Broken access control for user creation in Pydio Cells 2.2.9 allows remote anonymous users to create standard users via the profile parameter. (In addition, such users can be granted several admin permissions via the Roles parameter.)
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
pydio
cells
2.2.9
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.