CVE-2008-1627

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.

Date published : 2008-04-02

http://www.securityfocus.com/bid/28514

http://cdsware.cern.ch/invenio/news.html