CVE-2023-36002 — A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All — CVE Database · The Intelligence Room