PT-2020-13205

Name of the Vulnerable Software and Affected Versions Serpico versions prior to 1.3.3 Description An issue was discovered where the "/admin/attacments backup" endpoint can be requested by non-admin authenticated users. This allows an attacker with a user account to retrieve all attachments of all...