EUVD-2004-1666

Malware in sbrugna...

Insecure Access Control

ssddanbrown/bookstack does not properly validate user's access. The permission service allows users to obtain unauthorized access to the API, enabling users to view any attachment without having permission...