Skip to content
OpenAdvisories

Vendor

dataelement

3 known vulnerabilities.

Products

bisheng 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111363

    BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox

    BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary file_id values. Attackers can enumerate sequential file ids agai…

    dataelement bisheng