Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the routeName query parameter in the custom-action dispatch process. An attacker can gain unauthorized access to restricted backend routes by specifying the name of a protected route, thereby bypassing...