2 matches found
EUVD-2026-102494
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...
5CVSS5.8AI score0.00253EPSS
SaveExploits0References8
CVE-2026-111350 Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room and group identifiers can send DELETE requests, read group...
5CVSS0.00253EPSS
SaveExploits0References7
20