PT-2026-110547

Open Source Social Network OSSN through 10.1 contains a missing authorization vulnerability in ossn album page handler that allows unauthenticated attackers to download files via album/getphoto and album/getcover. Attackers can enumerate sequential file GUIDs to retrieve friends-only album photos...