CVE-2015-3431

Critical

Published: 19/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Pydio (formerly AjaXplorer) before version 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, leading to OS command injection vulnerabilities.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the system, posing a serious threat to the security of the organization's data and infrastructure.

Recommendation

It is recommended to upgrade Pydio to version 6.0.7 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities."