Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 0.8%
exploitation probability
0.8%top 47% of all CVEs
observed exploitation
nono source reports it
Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked document records.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
documenso · documensoReferences
https://github.com/documenso/documensohttps://github.com/documenso/documenso/blob/v2.12.0/apps/remix/server/api/files/files.tshttps://github.com/documenso/documenso/commit/4f346d3c2d5264f221e4d787e162f16051e44114https://www.vulncheck.com/advisories/documenso-before-2.13.0-unauthenticated-file-upload-via-api-files-upload-pdf