CVE-2024-54449 — The API used to interact with documents in the application contains two endpoints with a flaw that allows an authenticated attacker to write a file with controlled contents to an arbitrary location on — CVE Database · The Intelligence Room