Suitenumerique Docs vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Suitenumerique Docs: 2 record(s), with affected versions and fixes.
CVE-2026-111169
Low · 3.1
CWE-639 Oct 15, 2026
La Suite Docs through 6.0.0 Authorization Bypass via Comment Thread Creation
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments into another document's thread without access.
CVE-2026-22867
Medium · 5.4
CWE-79 Jan 15, 2026
LaSuite Doc affected by Stored XSS via Interlinking Block
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Interlinking feature. When a user creates a link to another document within the editor, the URL of that link is not validated. An attacker with document editing privileges can inject a malicious javascript: URL that executes arbitrary code when other users click on the link. This vulnerability is fixed in 4.4.0.