Skip to content
OpenAdvisories

Vendor

mindoc-org

1 known vulnerabilities.

Products

MinDoc 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-111364

    MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch

    MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book …

    mindoc-org MinDoc