Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the tickets.getMilestone process. An attacker can retrieve sensitive milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs through the...