Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the PATCH /api/timesheets/id and POST /api/timesheets endpoints, which accept a user-supplied project ID that is resolved through a query builder allowing the submitted ID to bypass...