PT-2019-11264

Name of the Vulnerable Software and Affected Versions: API Platform versions 2.2.0 through 2.3.5 Description: The issue is related to an Incorrect Access Control vulnerability in GraphQL delete mutations. This allows a user who is authorized to delete a resource to delete any resource. The attack...