CVE-2019-10048

CVE-2019-10048 describes an arbitrary command execution vulnerability in the ImageMagick plugin of Pydio through version 8.2.2. This flaw allows an authenticated administrator to inject and execute shell commands due to insufficient input validation in the plugin's configuration options. Rated 7.2 HIGH, the vulnerability requires high privileges (administrator access) but has low attack complexity, potentially leading to full compromise of the underlying operating system. There is currently no public exploit code (Metasploit, Nuclei, ExploitDB) and no evidence of active exploitation or significant community discussion.