Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.
The product creates a search index of private or sensitive documents, but it does not properly limit index access to actors who are authorized to see the original information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Omeka_s | Omeka | * | 4.0.4 (excluding) |