CVE-2018-21031 - bypass access control

Hello,

We posted our official response here now: Security: Regarding CVE-2018-21031

Sorry it took a little while - but we where notified at the same time as everyone else - the issue was not responsible disclosed to our team directly.