Robin Wood

**Name of the Vulnerable Software and Affected Versions** ActiveCollab versions prior to 2.3.2 **Description** The issue allows remote authenticated users to bypass intended access restrictions. This can lead to unauthorized actions such as deleting an attachment or subscribing to an object, which can be achieved via a crafted URL. **Recommendations** For versions prior to 2.3.2, update to version 2.3.2 or later to resolve the issue.