Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 12

La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00275 Published 2026-10-15 No fix listed CWE-639
Priority LOW 34

LaSuite Doc is a collaborative note taking, wiki and documentation platform.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0025 Published 2026-09-24 Fixed in 5.4.0 CWE-200
Priority LOW 37

Docs through 5.6.1 contains a server-side request forgery vulnerability in the cors-proxy endpoint that allows anonymous attackers to make outbound requests by providing a public document UUID.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00507 Published 2026-09-14 No fix listed CWE-918