Threats tagged 'ghsa-h8vc-h7q7-f23j'

Chevereto versions before 4.5.8 have an authorization bypass vulnerability in the get-album-contents action of the /json route. This flaw allows unauthenticated attackers to list private albums by using another user's album ID. Attackers with any session token from a public page and an album's encoded ID can access image filenames, viewer URLs, direct file URLs, and download private images.