Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to missing authorization checks in the view process. An attacker can access sensitive display page templates by sending crafted URLs. Remediation Upgrade...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the profile picture upload. An attacker can cause significant service slowdowns by uploading a profile picture exceeding the intended size limit. Remediation Upgrade...