Missing Authorization

Overview @actual-app/sync-server is an actual syncing server Affected versions of this package are vulnerable to Missing Authorization via the /sync/ endpoints due to missing verification that the authenticated user owns or has access to the targeted file. An attacker can access, modify, or...