Bisheng has authentication bypass vulnerabilities

Overview Bisheng contains three vulnerabilities: a pre-authentication account takeover mechanism via a legacy single sign-on SSO endpoint; an Insecure Direct Object Reference IDOR vulnerability that exposes cross-user workflow data; and prior to version 2.5.0, authenticated attackers could perfor...