Vincent Yang

Backend users can insert arbitrary records and files into the clipboard without proper read permission checks. This allows unauthorized users to gather information about records and files they are not permitted to view.