CVE-2021-40884
Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.p…
Published: 2021-10-11 · CVSS: Unscored
Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7