Skip to content
OpenAdvisories

Vendor

documize

1 known vulnerabilities.

Products

community 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-71234

    Documize Community - Attachment Download Authorization Bypass via Non-Validated secure Token

    Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) > 0), …

    documize community