GHSA-62ch-j6x7-722j

# Security Advisory — Page Content Retrieval (Improper Authorization)

## Summary

An improper authorization issue in the page content retrieval feature may allow retrieval of non-public information.

## Affected Versions

- 1.x series: <= 1.41.0 - 2.x series: <= 2.41.0

## Patched Versions

- 1.41.1 - 2.41.1

## Description

In part of the page content retrieval feature, insufficient authorization checks could allow processing associated with non-public pages to be executed. If exploited, the contents and attachments of non-public pages may be obtained by a third party. Users affected by this vulnerability should update to a fixed version.

## Solution

Update to the fixed version. For the 1.x series, update to 1.41.1 or later. For the 2.x series, update to 2.41.1 or later.

## Credits

OpenSource WorkShop thanks **Sho Odagiri** (小田切 祥) of **GMO Cybersecurity by Ierae, Inc.** for reporting this vulnerability.