Skip to content
OpenAdvisories

Product · zhimaAi

chatwiki

4 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-124027 Scanner template

    ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

    ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query par…