The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
Loading application…