BookStackApp BookStack authorization issue vulnerability

BookStackApp versions prior to 26.09.2 contain an authorization issue vulnerability. This vulnerability stems from improper authorization in AttachmentController; authenticated attackers with attachment permissions can enumerate, download, rename, re-associate, or replace attachments within draft...