0.001 Low
EPSS
Percentile
22.7%
Missing access control in getSelectedMimeTypesByRole function allows authenticated users, such as subscribers, to retrieve approved mime types for any given role.