PT-2024-17934 · Unknown · Kinto-Attachment

Name of the Vulnerable Software and Affected Versions: kinto-attachment versions prior to 6.4.0 Description: The issue allows an attachment file of an existing record to be replaced if a user has read permission on one of the parent collections or buckets. Furthermore, if the read permission is...