baseless/changelog.d/check-attachment-attribution.security
2025-01-24 09:36:38 -08:00

2 lines
108 B
Plaintext

CommonAPI: Prevent users from accessing media of other users by creating a status with reused attachment ID