Incorrect Authorization

Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Incorrect Authorization via the collection duplication endpoint /:id/duplicate, where the disableDuplicate collection setting was not enforced at the operation...