Leftenantzero

An Insecure Direct Object Reference (IDOR) issue exists in the `/api/v1/responses` endpoint. This occurs because the `get flow by id or endpoint name()` function fails to verify if the authenticated user owns the flow when it is accessed via a UUID. An authenticated attacker can execute any flow belonging to another user by specifying the victim's flow ID in the `model` parameter. This can lead to the execution of unauthorized workflows, consumption of other users' resources, and access to sensitive data processed by those flows.

An authorization bypass exists in the `ydoc:document:join` Socket.IO handler. The handler only performs ownership checks when the `document id` variable starts with the prefix `note:` (colon). However, the `YdocManager` storage layer normalizes all document IDs by replacing colons with underscores. An attacker can bypass the authorization check by requesting a document using `note <id>` (underscore) instead of `note:<id>` (colon), allowing them to access the same underlying Yjs document. This results in the server returning the full document state and leaking the private note contents of other users.

The Browser Relay `/cdp` WebSocket endpoint did not require authentication, allowing websites to connect via loopback and access sensitive data. Attackers can connect to `ws://127.0.0.1:18792/cdp` to steal session cookies and execute JavaScript in other browser tabs. Users must have the Browser Relay extension installed and active, and must visit an untrusted site for exploitation to occur. The vulnerable component exposes a local WebSocket endpoint for forwarding Chrome DevTools Protocol (CDP) messages. The `/cdp` upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests.

The `save images Asset` GraphQL mutation in Craft CMS can be exploited to fetch internal URLs. This is possible by providing a domain name that resolves to an internal IP address, which bypasses hostname validation. If non-image file extensions, such as .txt, are permitted, downstream image validation is bypassed. This allows an authenticated attacker with appropriate permissions to use the `save images Asset` mutation to retrieve sensitive data, such as AWS instance metadata credentials, from the underlying host. The vulnerable mutation is accessed via the GraphQL API endpoint `/graphql`. The `domain` parameter is used to provide the domain name that resolves to an internal IP address.