https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 22:16:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349631 EUVD-2026-349631 https://cve.radiocsirt.org/vuln/euvd-2026-349631 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71234 <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value.</p> <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71234 https://cve.radiocsirt.org/vuln/ghsa-4gcg-395p-mg6g <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a `secure` query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value. Any non-empty string, such as ?secure=x, bypasses authentication entirely and allows downloading any organization&#39;s attachments. Sibling handlers in the same file (togglePublish, delete) correctly enforce session-based authorization, confirming this is an inconsistency rather than intended design.</p> <p>Documize Community&#39;s attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a `secure` query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) &gt; 0), without comparing it to any server-stored value. Any non-empty string, such as ?secure=x, bypasses authentication entirely and allows downloading any organization&#39;s attachments. Sibling handlers in the same file (togglePublish, delete) correctly enforce session-based authorization, confirming this is an inconsistency rather than intended design.</p> https://cve.radiocsirt.org/vuln/ghsa-4gcg-395p-mg6g