CVE-2019-12902

Publication date

2019-06-19 23:05:59

Family

mitre

State

PUBLISHED

Description

Pydio Cells before 1.5.0 does incomplete cleanup of a users data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted users data.