Threats tagged 'ghsa-cr83-43p9-27qg'

TrailBase versions from 0.28.2 up to but not including 0.35.10 contain an insecure direct object reference (IDOR) vulnerability. Authenticated attackers can manipulate file upload metadata to access or delete files belonging to other users without proper ownership checks. This vulnerability allows attackers to read victim files by referencing their file IDs or cause permanent deletion by deleting or nulling records. The flaw also enables brute-force recovery of stripped file IDs using a filter on the file column.