PT-2026-96216

Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 1.4.0 Description The '/api/importer/row/' and '/api/importer/mapping/' endpoints fail to scope DataImportRow and DataImportColumnMap querysets to the owner of the associated DataImportSession. This allows any...