Vendor
CheckCle versions up to 1.6.0 contain a critical missing authorization vulnerability allowing unauthenticated access to database records via improperly configured PocketBase API rules.