Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the id parameter in playlist operations. An attacker can access or delete other users' playlists, and probe for the existence of arbitrary files by supplying a crafted base64-encoded...

Exploit for Authorization Bypass Through User-Controlled Key in Docmost

CVE-2026-34213 A low-privileged Docmost user could supply a vi...