Schorro

Certain endpoints fail to enforce proper permission checks, allowing authenticated low-privileged users to modify documents and data beyond the permissions assigned to their role.

Certain endpoints fail to enforce proper permission checks during document creation. This allows authenticated low-privileged users to bypass role-based access controls and create documents against records that exceed their assigned role permissions.

Certain endpoints fail to enforce proper role checks when modifying record status. This allows authenticated low-privileged attackers to invoke these endpoints to alter data beyond their permitted role, which compromises data integrity.