Vendor
zhimaAi
4 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage
ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query par…