PT-2026-102910

Name of the Vulnerable Software and Affected Versions KitchenAsty versions prior to 0.3.1 Description Broken object level authorization IDOR exists in the reservations API. The endpoint 'GET /api/reservations/:id' in packages/server uses authentication middleware but fails to perform ownership or...