Threats tagged 'ghsa-2xxv-cj6j-pj6f'

A vulnerability in the mail module's backend actions and AJAX routes allows backend users with access to the mail module to bypass access controls. These users can view, modify, send, and export mails and recipient groups beyond their authorized web mounts, exposing personal data of recipients.