Threats affecting pkg:github/karlomikus/bar-assistant

Bar Assistant versions 6.0.0-rc1 through before 6.11.0 contain an authorization vulnerability in the CocktailController::copy function. This flaw allows registered users who own a bar to bypass membership checks on source cocktails and copy private recipes and images from other bars by sending crafted POST requests. The issue is fixed in version 6.11.0.