Authorization bypass in La Suite Docs lets users comment on other threads
La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access.
6 records
La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access.
LaSuite Doc is a collaborative note taking, wiki and documentation platform.
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents.
Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID.
People is an application to handle users and teams, and distribute permissions across La Suite.
A security flaw has been discovered in suitenumerique messages 0.2.0.