EUVD-2026-102494

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...

CVE-2026-111350

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...

CVE-2026-111350

The Papermark application (versions through 0.22.0 ) is vulnerable to a missing authorization flaw in the data room viewer group API. Authenticated users can exploit this by providing a victim team's data room and group identifiers to perform unauthorized actions. Specifically, an attacker can se...

CVE-2026-111350 Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...