Cpe:2.3:a:chatwiki:chatwiki:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3achatwikichatwiki/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 21:29:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgChatWiki: Authentication bypass in getLibRawFileOnePage (CVE-2026-124027)https://feed.craftedsignal.io/briefs/2026-11-chatwiki-auth-bypass/Fri, 06 Nov 2026 21:29:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-chatwiki-auth-bypass/ChatWiki before version 2.10.0 contains an authentication bypass vulnerability in the GET /manage/getLibRawFileOnePage route, allowing unauthenticated attackers to enumerate parameters and access unauthorized tenant documents.ChatWiki versions prior to 2.10.0 contain a missing authentication vulnerability in the 'GET /manage/getLibRawFileOnePage' route. This vulnerability allows an unauthenticated attacker to retrieve PDF-rendered pages of documents belonging to any tenant. By enumerating 'admin_user_id' and 'file_id' query parameters, an attacker can bypass authorization checks to access data across the platform.

Impact

Successful exploitation allows unauthenticated attackers to read sensitive knowledge-base documents from other tenants, leading to unauthorized information disclosure and potential cross-tenant data leakage.

Recommendation

  • Upgrade all ChatWiki instances to version 2.10.0 or later to remediate the missing authentication flaw in the 'getLibRawFileOnePage' endpoint.
  • Audit access logs for high-frequency 'GET' requests to '/manage/getLibRawFileOnePage' originating from unauthenticated sessions or unauthorized IP addresses, specifically looking for sequential enumeration of query parameters.
]]>highadvisory