CVE-2023-53930 — ProjectSend r1605 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to download private files by manipulating the download ID parameter. Attackers can ac — CVE Database · The Intelligence Room