Threats tagged 'ghsa-qgc8-wm6f-pf7h'

Ryot versions prior to 10.5.6 have an authorization bypass vulnerability that allows authenticated users to revoke access links belonging to other users. This occurs because the system does not verify ownership when revoking access links, enabling attackers to disrupt shared access by revoking links using arbitrary accessLinkIds obtained from public share URLs.