CVE-2023-28635

The CVE-2023-28635 issue affects vantage6 prior to version 4.0.0, where resources named with integers could bypass access controls and allow some users to run algorithms they’re not authorized to. The root cause is a mismatch between resource IDs and names, enabling attackers to exploit numeric i...