CVE-2026-120427

MrDoc versions through 1.1.1 are vulnerable to a missing authorization flaw in the get_doctemp view. This vulnerability allows authenticated users to read the private document templates of other users by enumerating the sequential doctemp_id POST parameter. Exploitation of this flaw enables unaut...

EUVD-2026-115236

MrDoc through 1.1.1 contains a missing authorization vulnerability in the getdoctemp view that allows authenticated users to read other users' document templates. Attackers can enumerate the sequential doctempid POST parameter to retrieve the private template content of every user on the instance...