CVE-2024-23649 | Lemmy up to 0.19.0 API report improper authorization (GHSA-r64r-5h43-26qv)

A vulnerability classified as critical was found in Lemmy up to 0.19.0. This vulnerability affects unknown code of the file /api/v3/private_message/report of the component API. The manipulation leads to improper authorization.

This vulnerability was named CVE-2024-23649. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.