Threats tagged 'ghsa-qv5c-8hf7-xgx8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-124027ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route High8.72026-11-06GCVE DatabaseCVE-2026-124027 ChatWiki versions prior to 2.10.0 have a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage endpoint. This flaw allows unauthenticated attackers to access PDF-rendered pages of knowledge-base documents belonging to other tenants by enumerating sequential admin_user_id and file id parameters, bypassing ownership checks. The vulnerability is fixed in version 2.10.0. Report on CVE-2026-124027 Vulnerability CWE-306 #ghsa-qv5c-8hf7-xgx8	GCVE Database	2026-11-06

Page 1 of 1