Authentication Bypass by Capture-replay in GitHub repository answerdev/answer before 1.0.6.
answer answer