Filtered by vendor Documize
Subscriptions
Filtered by product Community
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-71234 | 1 Documize | 1 Community | 2026-08-10 | 7.5 High |
| Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) > 0), without comparing it to any server-stored value. | ||||
Page 1 of 1.