Threats tagged 'ghsa-p9jj-2fc3-42p6'

This vulnerability involves a shared client component that accepts doctor identifiers controlled by the caller for both read and write operations without requiring any authentication or authorization. This lack of access control allows unauthorized users to perform potentially sensitive operations impersonating doctors.