Skip to content
Threat Feed
Subscribe

Product

Papermerge Core (<= 3.5.3)

1 brief RSS
medium advisory

Missing Authorization Vulnerability in Papermerge Core

Papermerge Core versions through 3.5.3 contain a missing authorization vulnerability allowing authenticated users to manipulate or process documents belonging to other users via predictable API endpoints.

Papermerge Core web-application-vulnerability authorization-bypass access-control
1c