Vulnerabilidades do Suitenumerique Docs
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Suitenumerique Docs: 2 registro(s), com versões afetadas e correções.
CVE-2026-111169
Baixa · 3.1
CWE-639 15/10/2026
La Suite Docs through 6.0.0 Authorization Bypass via Comment Thread Creation
La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document's resource_id, inserting comments into another document's thread without access.
CVE-2026-22867
Média · 5.4
CWE-79 15/01/2026
LaSuite Doc affected by Stored XSS via Interlinking Block
LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 3.8.0 to 4.3.0, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Interlinking feature. When a user creates a link to another document within the editor, the URL of that link is not validated. An attacker with document editing privileges can inject a malicious javascript: URL that executes arbitrary code when other users click on the link. This vulnerability is fixed in 4.4.0.