Apache Pulsar authorization issue vulnerability

Versions 2.8.0 through 4.0.14 and 4.1.0 through 4.2.5 of Apache Pulsar contain an authorization issue vulnerability. This vulnerability arises because when performing a truncate operation on a topic partition, no check is performed to verify whether the caller possesses tenant administrator...