Pydio Cells before 1.5.0 does incomplete cleanup of a user's data upon deletion.

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• pydio cellsbefore 1.5.0

Other highest-scoring records for the same primary product.

• CVE-2023-32749Pydio Cells allows users by default to create so-called external users in order to share files with them.
  39Monitor
• CVE-2019-12901Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete file
  35Monitor
• CVE-2020-12851Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositori
  32Monitor
• CVE-2020-12847Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with an administrator ro
  29Monitor
• CVE-2020-12850The following vulnerability applies only to the Pydio Cells Enterprise OVF version 2.0.4.
  28Monitor
• CVE-2020-12852The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the
  28Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.