Back
A missing authorization check in the file deletion function allows any authenticated user to delete any file on the system by its ID.
vulnerability report
漏洞报告
idor
authorization
