Description
Missing Authorization vulnerability in NotFound Unlimited Timeline allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Unlimited Timeline: from n/a through n/a.
Problem types
Product status
Any version before 1.6.1
Credits
Tran Nguyen Bao Khanh(VCI - VNPT) (Patchstack Alliance)
References
patchstack.com/...ken-access-control-vulnerability?_s_id=cve