Vendor
An authorization flaw in Quivr versions 0.0.322 and earlier allows authenticated users to modify or overwrite arbitrary prompts via unvalidated API endpoints.