Skip to content
OpenAdvisories

Product · suitenumerique

docs

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-76907

    LaSuite Doc: Public Documents Enumeration

    LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public …

    suitenumerique docs
  • Medium 6.8
    CVE-2026-92800

    Docs before 5.4.1 Stale Collaboration Session After Access Revocation

    Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never…

    suitenumerique docs
  • Medium 5.8
    CVE-2026-91081

    Docs through 5.6.1 SSRF via Unauthenticated cors-proxy Endpoint

    Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID. Attackers can exploit DNS time-of-check-time-of-use race conditio…

    suitenumerique docs