1. Security Alert: IDOR Vulnerability Exposes Unauthorized Canvas Access via URL Slug Manipulation
A critical Insecure Direct Object Reference (IDOR) vulnerability has been identified, allowing unauthorized users to potentially access or modify collaborative canvases (rooms) simply by guessing or altering the slug in the URL. This flaw bypasses intended access controls, exposing sensitive collaborative spaces to dat...