Threats tagged 'ghsa-3j38-ccjp-5wfv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-120427MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_doctemp view that allows authenticated Medium5.32026-11-02GCVE DatabaseCVE-2026-120427 MrDoc versions through 1.1.1 have a missing authorization vulnerability in the get_doctemp view. Authenticated users can exploit this flaw to read document templates belonging to other users by enumerating the sequential doctemp_id POST parameter. This allows unauthorized access to private template content. Report on CVE-2026-120427 Vulnerability CWE-639 #ghsa-3j38-ccjp-5wfv	GCVE Database	2026-11-02

Page 1 of 1