[MEDIUM] Sulu: Media move/update authorization bypass (IDOR)

PKSA-zmfc-sgjt-9gmb CVE-2026-82395 GHSA-h6cx-gjxx-v25c

Affected package: sulu/sulu

Affected version: >=3.0.0-alpha1,<3.0.8|<=2.6.24

Reported by:
GitHub