CVE-2024-2232

The lacks CSRF checks allowing a user to invite any user to any group (including private groups)