CVE-2019-12902

Name of the Vulnerable Software and Affected Versions Pydio Cells versions prior to 1.5.0

Description The issue arises from incomplete cleanup of a user's data when their account is deleted. This allows a new user, who is assigned the same User ID as a previously deleted user, to restore the deleted user's data.

Recommendations For versions prior to 1.5.0, update to version 1.5.0 or later to ensure complete cleanup of user data upon deletion.