Authentication Bypass

@plone/volto is vulnerable to authentication bypasses. A remote attacker is able to get attacker’s authentication cookie replaced with the authentication cookie from another user, effectively giving the attacker full access to the victim’s account and privileges.