Security Advisory

CVE-2026-34213

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-14 21:49:55

Last updated 2026-04-15 13:31:17

Assigner GitHub_M

CVSS score 5.4

State PUBLISHED

Description

Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and prior to version 0.71.0, improper authorization in Docmost allows a low-privileged authenticated user to overwrite another page's attachment within the same workspace by supplying a victim `attachmentId` to `POST /api/files/upload`. This is a remote integrity issue requiring no victim interaction. Version 0.71.0 contains a patch.

← Browse all CVEs View on cve.org ↗