PT-2025-38716

Name of the Vulnerable Software and Affected Versions Profession Fit version 5.0.99 Build 44910 Description The software allows bypassing authorization controls through direct requests to specific API endpoints and URLs. Specifically, a direct request to the /api/challenges/id endpoint allows...