Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.