[MEDIUM] Craft CMS has a Missing Authorization Check on User Group Removal via save-permissions Action

PKSA-dmwd-n76s-m3f9 GHSA-jq2f-59pj-p3m3

Affected package: craftcms/cms

Affected version: >=5.6.0,<5.9.15

Reported by:
GitHub