Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper context being set for credentials lookup in the resolveScm process. An attacker can gain unauthorized access to and capture credentials by leveraging Item/Configure permissions. Remediation Upgrade...