Threats tagged 'ghsa-77m2-jc69-79pq'

REBUILD versions prior to 4.5.3 have an authorization bypass vulnerability in the FeedsListController's fetchDetails and fetchComments functions. This flaw allows authenticated users to bypass privilege checks and access private or team-scoped feed content, including images, attachments, and comments, by enumerating sequential IDs through specific endpoints.