TREK Missing Authorization Vulnerability in Trip Photo Management Routes

A vulnerability exists in TREK versions prior to 2.7.2, where the application lacked proper authorization checks on the Immich trip photo management routes. This oversight allowed authenticated users to access or modify another user's trip photos through the Immich integration.

Impact

Exploitation of this vulnerability could lead to unauthorized access to or modification of trip photos belonging to other users.

Remediation

Users are advised to update TREK to version 2.7.2 or later, where this vulnerability has been addressed.