Messages disclosure via search feature of other users group(Cross-Tenant).

Due to a Insecure Direct Object Reference (IDOR) vulnerability identified within the message search function of Lark, an attacker could have potentially viewed messages, docs, and attachments shared in other users groups. We thank @base_64 for reporting this to our team and verifying the resolution.