CVE Intelligence

Mindoc-org vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mindoc-org products: 1 record(s), with severity, exploitation and fixes.

MinDoc 1

Exploited only (KEV) →

CVE-2026-111364 Medium · 6.5 CWE-639 Oct 15, 2026
MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to read markdown and HTML from private books.