Threats tagged 'ghsa-mr68-8hjx-jc67'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.9	CVE-2026-7702toeverything AFFiNE · Improper Authorization Medium6.92026-05-03GCVE DatabaseCVE-2026-7702 A vulnerability in toeverything AFFiNE up to version 0.26.3 allows remote attackers to bypass authorization via the allowDocPreview function in the Public Markdown Preview Endpoint. The issue enables unauthorized access to document previews without proper permissions. Public exploit code is available, and the vendor has not responded to the disclosure. Report on CVE-2026-7702 Vulnerability CWE-285 #ghsa-mr68-8hjx-jc67	GCVE Database	2026-05-03

Page 1 of 1