[HIGH] Flarum post mentions can be used to read any post on the forum without access control

PKSA-71bc-bv6b-m4v2 CVE-2023-22487 GHSA-22m9-m3ww-53h3

Affected package: flarum/mentions

Affected version: <1.6.3

Reported by:
GitHub