Skip to content
OpenAdvisories

Vendor

docat-org

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    Docat has Arbitrary File Upload exists in Upload API

    Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensiti…