Vendor
TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference (IDOR) vulnerability in std.FileUpload columns that lacks ownership validation.