GHSA-qrmm-w4v4-q7f8: 
Python vulnerability analysis and mitigation

A high-severity security vulnerability was identified in docassemble (pip package) affecting versions prior to 1.2.65. The vulnerability, tracked as GHSA-qrmm-w4v4-q7f8, was discovered by Jim Platania of Seiso LLC and was published on May 5, 2021. The issue relates to unauthorized access through URL manipulation and is classified under CWE-552 (GitHub Advisory).

The vulnerability is categorized as CWE-552 and has been assessed as High severity. The issue specifically involves unauthorized access capabilities through URL manipulation in the docassemble system (GitHub Advisory).

The vulnerability enables attackers to gain unauthorized access to information on the system through URL manipulation techniques (GitHub Advisory).

The vulnerability has been patched in multiple versions: version 1.2.65 of the master branch, version 1.1.113 of the 1.1.x series, and version 1.0.12 of the stable branch. The Docker image on docker.io has also been updated. For systems unable to upgrade immediately, a manual workaround is available by applying the changes from commit e3dbf6c and restarting the server through the Configuration screen (GitHub Advisory).