Unrated
Pydio Cells before 1.5.0 fails to neutralize '../' elements, allowing an attacker with minimum privilege to Upload files to, and Delete files/folders...
CVE-2019-12901
First seen on SecPulse
Original description The description as published by the source.
References
- advisory pydio.com
- advisory research.loginsoft.com