CVE-2025-69907

An unauthenticated information disclosure vulnerability exists in Newgen OmniDocs due to a lack of authentication and access control on the /omnidocs/GetListofCabinet API endpoint. A remote attacker can access this endpoint without valid credentials to retrieve sensitive internal configuration in...