Access Control Bypass

Overview payload is a Node, React and MongoDB Headless CMS and Application Framework Affected versions of this package are vulnerable to Access Control Bypass via the updateDocument function in packages/payload/src/collections/operations/utilities/update.ts, where the password field is extracted...