Skip to content
OpenAdvisories

Vendor

papermark

2 known vulnerabilities.

Products

papermark 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-111350

    Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API

    Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers …

    papermark papermark
  • Medium 4.7
    CVE-2026-57957

    Papermark 0.22.0 - CORS Misconfiguration in Viewer Upload Endpoint

    Papermark through 0.22.0 contains a cross-origin resource sharing (CORS) misconfiguration vulnerability that allows unauthenticated remote attackers to perform credentialed cross-origin requests by exploiting the TUS-based viewer upload endpoint reflecting ar…

    papermark papermark