Product
An authorization bypass vulnerability in Camunda Platform allows authenticated attackers to access, download, or delete task comments and attachments by exploiting missing authorization checks in specific engine-rest sub-resources.