Phong Lan

Authenticated backend users can retrieve file metadata through various Backend API routes due to insufficient permission checks. This allows users to access metadata for files located outside their authorized file mounts or storages.