Cpe:2.3:a:sonicjs:sonicjs:*:*:*:*:*:*:*:*

SonicJS versions through 3.0.0 contain a missing authorization vulnerability in API routes that allows authenticated Authors or Editors to bypass document-level ACLs and modify content owned by other users.