Pydio Cells before 1.5.0 does incomplete cleanup of a users data upon deletion. This allows a new user, holding the same User ID as a deleted user, to restore the deleted users data.
The product does not properly “clean up” and remove temporary or supporting resources after they have been used.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cells | Pydio | * | 1.5.0 (excluding) |