{
    "data_version": "4.0",
    "data_type": "CVE",
    "data_format": "MITRE",
    "CVE_data_meta": {
        "ID": "CVE-2023-2978",
        "ASSIGNER": "cna@vuldb.com",
        "STATE": "PUBLIC"
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A vulnerability was found in Abstrium Pydio Cells 4.2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Change Subscription Handler. The manipulation leads to authorization bypass. The exploit has been disclosed to the public and may be used. Upgrading to version 4.2.1 is able to address this issue. It is recommended to upgrade the affected component. VDB-230210 is the identifier assigned to this vulnerability."
            },
            {
                "lang": "deu",
                "value": "Eine problematische Schwachstelle wurde in Abstrium Pydio Cells 4.2.0 ausgemacht. Davon betroffen ist unbekannter Code der Komponente Change Subscription Handler. Mit der Manipulation mit unbekannten Daten kann eine authorization bypass-Schwachstelle ausgenutzt werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Ein Aktualisieren auf die Version 4.2.1 vermag dieses Problem zu l\u00f6sen. Als bestm\u00f6gliche Massnahme wird das Einspielen eines Upgrades empfohlen."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "CWE-639 Authorization Bypass",
                        "cweId": "CWE-639"
                    }
                ]
            }
        ]
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Abstrium",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Pydio Cells",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "=",
                                            "version_value": "4.2.0"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "references": {
        "reference_data": [
            {
                "url": "https://vuldb.com/?id.230210",
                "refsource": "MISC",
                "name": "https://vuldb.com/?id.230210"
            },
            {
                "url": "https://vuldb.com/?ctiid.230210",
                "refsource": "MISC",
                "name": "https://vuldb.com/?ctiid.230210"
            },
            {
                "url": "https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421",
                "refsource": "MISC",
                "name": "https://pydio.com/en/community/releases/pydio-cells/pydio-cells-enterprise-421"
            },
            {
                "url": "https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be",
                "refsource": "MISC",
                "name": "https://popalltheshells.medium.com/multiple-cves-affecting-pydio-cells-4-2-0-321e7e4712be"
            }
        ]
    },
    "credits": [
        {
            "lang": "en",
            "value": "ignatiusmichael (VulDB User)"
        }
    ],
    "impact": {
        "cvss": [
            {
                "version": "3.1",
                "baseScore": 4.6,
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                "baseSeverity": "MEDIUM"
            },
            {
                "version": "3.0",
                "baseScore": 4.6,
                "vectorString": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
                "baseSeverity": "MEDIUM"
            },
            {
                "version": "2.0",
                "baseScore": 4.1,
                "vectorString": "AV:A/AC:L/Au:S/C:N/I:P/A:P"
            }
        ]
    }
}