2 matches found
CVE-2026-7702
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the file /workspace/:workspaceId/:docId of the component Public Markdown Preview Endpoint. The manipulation results in authorization bypass. It is possible to launch the attack...
6.9CVSS5.5AI score0.00519EPSS
SaveExploits0References4
CVE-2026-7702: Authorization Bypass Through User-Controlled Key
A vulnerability was detected in toeverything AFFiNE up to 0.26.3. This issue affects the function allowDocPreview of the file /workspace/:workspaceId/:docId of the component Public Markdown Preview Endpoint. The manipulation results in authorization bypass. It is possible to launch the attack...
6.9CVSS5.5AI score0.00519EPSS
SaveExploits0References3
20