CVE-2019-15032: Pydio

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information.

Affected products

• Pydio Pydio: version 6.0.8 only

Published 2019-09-19. Last modified 2026-06-17.