CVE-2025-63291

The Alteryx server versions 2022.1.1.42654 and 2024.1 are vulnerable to an authorization bypass flaw. When processing API requests, the server uses MongoDB object IDs to identify requested data but fails to verify if the authenticated user has permission to access the specific ID provided. An att...