2024-11-27 00:00:00
mitre
PUBLISHED
OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.