Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the nested endpoint in the API controller. An attacker can access restricted and unpublished content by sending unauthenticated requests to the endpoint, which returns the full page tree including sensitive dat...