RAGFlow 0.13.0 suffers from improper access control in document-hooks.ts, allowing unauthorized access to user documents.

Published Dec 9, 2024 · Updated Dec 11, 2024 · Assigned by mitre