CVE-2024-11680

ProjectSend, an open-source file-sharing web application, has been exploited by attackers using an improper authentication vulnerability since the start of 2024. Exploiting this vulnerability allows the attackers to enable unauthorized…