Skip to content
OpenAdvisories

Vendor

zhimaAi

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

    ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query par…