Vendor
Databasement versions before 1.7.14 are vulnerable to an authentication bypass where invitation tokens are improperly validated and cached, allowing attackers to hijack accounts and gain access to managed database credentials.