Due to not verifying whether an user has been granted access to add external storages an authenticated user could even mount external storage (e.g. SMB/FTP/etc.) without permission.
For more information please consult the official advisory.
This advisory is licensed CC BY-SA 4.0