Tags: #authorization

A missing authorization check in the file deletion function allows any authenticated user to delete any file on the system by its ID.