CVE-2017-6199: Improper Authentication

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field...