CVE-2025-63291

The Alteryx server versions 2022.1.1.42654 and 2024.1 are vulnerable to an authorization bypass because the application fails to verify if an authenticated user has permission to access specific MongoDB object IDs used in API requests. An attacker can exploit this flaw by specifying particular Mo...