Vendor
Aptabase versions prior to commit 61d4c01 contain an authentication bypass vulnerability allowing unauthenticated attackers to forge sign-in links and impersonate users via a publicly known AUTH_SECRET.