Vendors / suitenumerique Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now suitenumerique records in CISA KEV No suitenumerique vulnerabilities are listed in CISA KEV.
Priority HIGH 68
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents.
CVSS 4.0 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00406 · Published 2026-09-16 · Fixed in 5.4.1 CWE-613
Priority MEDIUM 58
People is an application to handle users and teams, and distribute permissions across La Suite.
CVSS 3.1 MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.0032 · Published 2026-05-08 · Fixed in 1.25.0 CWE-269
Priority MEDIUM 57
A security flaw has been discovered in suitenumerique messages 0.2.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-03-08 · Fixed in 0.3.0 CWE-287
Priority LOW 37
Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-09-14 · No fix listed CWE-918
Priority LOW 34
LaSuite Doc is a collaborative note taking, wiki and documentation platform.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0025 · Published 2026-09-24 · Fixed in 5.4.0 CWE-200
Priority LOW 12
La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access.
CVSS 4.0 LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00275 · Published 2026-10-15 · No fix listed CWE-639
Open these records in search → All records by CVSS severity
0 1 4 1 0
THREATIST.IORead the docs