CVE-2026-114377

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal. The...

CVE-2026-114377 leomoon-studios wiki-go Comment Deletion comments.go DeleteComment path traversal

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal. The...

CVE-2026-114377

The leomoon-studios wiki-go software (up to version 1.9.1 ) is vulnerable to a path traversal vulnerability in the Comment Deletion Handler component. Specifically, the DeleteComment function within the internal/comments/comments.go file fails to properly sanitize the documentPath argument. An at...

EUVD-2026-107550

A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of the component Comment Deletion Handler. The manipulation of the argument documentPath leads to path traversal. The...

CVE-2026-114376

A path traversal vulnerability exists in the leomoon-studios wiki-go software in versions up to 1.9.1 . The flaw is located within the SaveHandler/SourceHandler function of the internal/handlers/editor.go file in the API component. A remote attacker can execute a manipulation to perform a path tr...

EUVD-2026-107545

A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor.go of the component API. Executing a manipulation can lead to path traversal. The attack can be launched remotely. T...

CVE-2026-114375

A path traversal vulnerability exists in the Files Rename API of leomoon-studios wiki-go up to version 1.9.1 . The flaw resides in the RenameFileHandler function within internal/handlers/files.go, where manipulating the currentPath/newName argument allows for remote path traversal. Public exploit...

EUVD-2026-107543

A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files Rename API. Performing a manipulation of the argument currentPath/newName results in path traversal. The attack can ...

CVE-2026-114374

The leomoon-studios wiki-go software, versions up to 1.9.1 , is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists within an unknown function in the internal/handlers/metadata_api.go file, specifically affecting the fetch-metadata Endpoint component. An attacker can...

EUVD-2026-107539

A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadataapi.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The...