CVE-2020-12852

CVE-2020-12852 affects Pydio Cells 2.0.4, allowing an authenticated administrator to leverage the update feature to execute arbitrary code. By manipulating the custom update URL and public RSA key, an attacker can force the application to download and replace its binary with a malicious one. This vulnerability has a CVSS score of 6.8 (Medium), indicating a network-based attack with low complexity, requiring high privileges and user interaction, leading to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.