An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who can edit pages, including anonymous users under the default configuration, to read reposito…
CVSS 4.0MEDIUM 6.9·Network·No auth·No interaction·EPSS 0.00297·Published 2026-11-02·Fixed in 2.26.2CWE-552
An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that allows attackers who can edit pages, including anonymous users under the default configuration, to i…
CVSS 4.0MEDIUM 5.3·Network·No auth·User interaction·EPSS 0.00288·Published 2026-11-02·Fixed in 2.26.2CWE-79