Authenticated file enumeration via path traversal

Path traversal in Pydio Cells 2.2.9 allows remote authenticated users to enumerate files outside their authorized workspaces. The Copy and Move job handlers accept parent-directory segments in nodes, while the Delete endpoint accepts them in Path, and disclose object existence through distinct HTTP errors. A standard account and a guessed path are sufficient to test for files or directories in another user's personal area or any Cell, without exposing file contents.