Vendor
ChatWiki before version 2.10.0 contains an authentication bypass vulnerability in the GET /manage/getLibRawFileOnePage route, allowing unauthenticated attackers to enumerate parameters and access unauthorized tenant documents.