CVE-2019-12903: Pydio Cells

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Pydio Cells before 1.5.0, when supplied with a Name field in an unexpected Unicode format, fails to handle this and includes the database column/table name as pert of the error message, exposing sensitive information.

Affected products

• Pydio Cells: before 1.5.0 (fixed in 1.5.0)

Published 2019-06-20. Last modified 2026-06-17.