142 matches found
React-Router-CVE-2025-61686-
CVE-2025-61686 Vulnerability Analysis Report Vulnerability Overview CVE ID : CVE-2025-61686 Affected Versions : @react-router/node 7.0.0 to 7.9.3 Vulnerability Type : Path Traversal / Directory Traversal Vulnerability Principle 1. Vulnerability Location The vulnerability exists in the getFile...
Paisa < 0.7.8 - Unauthenticated Path Traversal
Paisa 0.7.8 contains a path traversal vulnerability caused by improper sanitization of file names in GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers, letting unauthenticated attackers read arbitrary files and delete backups via ../ sequences. id: CVE-2026-116067 info: name: Pais...
CVE-2026-116067
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and...
CVE-2026-116067 Paisa before 0.7.8 Path Traversal via Editor and Sheet API
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and...
CVE-2026-116067
Paisa versions prior to 0.7.8 are vulnerable to a path traversal vulnerability within the GetFile , GetSheet , DeleteBackups , and DeleteSheetBackups handlers. The root cause is the improper sanitization of ../ sequences in filenames, which allows unauthenticated attackers to read arbitrary serve...
EUVD-2026-109381
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and...
CVE-2026-116067 Paisa before 0.7.8 Path Traversal via Editor and Sheet API
Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups through ../ sequences in file names. Attackers can send crafted names to the editor file and...
PT-2026-122970
Name of the Vulnerable Software and Affected Versions Paisa versions prior to 0.7.8 Description Unauthenticated attackers can perform path traversal by using ../ sequences in file names. This allows the reading of any server-readable file and the deletion of backup files outside the journal or...
CVE-2026-18560
Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, and 11.8.x
CVE-2026-18560 Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status
Mattermost versions 11.10.x = 11.10.0, 11.7.x = 11.7.9, 11.9.x = 11.9.1, 11.8.x = 11.8.5 fail to validate user’s permissions before other validations which allows non-content reviewers to infer a post’s flagged status via direct API call.. Mattermost Advisory ID: MMSA-2026-00754...
GO-2026-6663 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist) in github.com/siyuan-note/siyuan/kernel
SiYuan: TLS Private Keys Readable via getFile Incomplete Blocklist in github.com/siyuan-note/siyuan/kernel...
SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
Summary: IsForbiddenAbsPath only blocks conf/conf.json by exact match. The TLS private key conf/key.pem and CA private key conf/ca.key live in the same conf/ directory and are absent from the blocklist. Any authenticated user can retrieve them via POST /api/file/getFile. Root cause...
GHSA-4WWP-F6GW-6QM5 SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
Summary: IsForbiddenAbsPath only blocks conf/conf.json by exact match. The TLS private key conf/key.pem and CA private key conf/ca.key live in the same conf/ directory and are absent from the blocklist. Any authenticated user can retrieve them via POST /api/file/getFile. Root cause...
CVE-2026-85578
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...
CVE-2026-85578 SiYuan through 3.8.1 Authorization Bypass via getFile
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...
EUVD-2026-71001
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...
CVE-2026-85578 SiYuan through 3.8.1 Authorization Bypass via getFile
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...
CVE-2026-85578
SiYuan through 3.8.1 contains an authorization bypass in the /api/file/getFile endpoint. Attackers with reader role can retrieve files from notebooks explicitly configured as Visible:false , gaining access to private workspace files including notebook metadata and internal configuration by knowin...
CVE-2026-85578 SiYuan through 3.8.1 Authorization Bypass via getFile
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...
CVE-2026-85578: Missing Authorization
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal...