GHSA-XJ2C-G5XP-4P47 Duplicate Advisory: Craft CMS: Authenticated "assets/preview-thumb" discloses signed fallback transform preview link to CP users without asset-view permission

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x76w-8c62-48mg. This link is maintained to preserve external references. Original Description Craft CMS contains a missing authorization vulnerability in the assets/preview-thumb endpoint. A Control Panel user...