Threats affecting pkg:github/didi/KnowStreaming

KnowStreaming versions up to and including 3.4.1 have a missing authorization vulnerability in their REST API endpoints. This flaw allows any authenticated user to bypass role-based access control and access protected administrative functionality. Exploitation can lead to attackers creating administrator accounts or elevating their privileges without proper authorization.