Vulnerabilities in docmost

8 results

Vexday analysis

Docmost apresenta 8 vulnerabilidades catalogadas, predominantemente relacionadas a Cross-Site Scripting (CWE-79), sem casos críticos ou sob exploração ativa no momento. O portfólio de risco é estável, com nenhuma divulgação recente nos últimos 90 dias, sugerindo vulnerabilidades de menor urgência operacional.

CVE-2026-22249HIGHDocmost affected by an Arbitrary File Write via Zip Import Feature (ZipSlip)EPSS 0.5%CVE-2026-33146MEDIUMDocmost's Public Share Search Exposes Metadata of Restricted ChildrenEPSS 0.3%CVE-2026-23630MEDIUMDocmost is vulnerable to stored Cross-Site Scripting (XSS) through Mermaid renderingEPSS 0.2%CVE-2026-24045HIGHDocmost Affected by Stored XSS in Public Share PageEPSS 0.2%CVE-2026-34213MEDIUMDocmost has cross-page attachment overwrite via flawed attachmentId overwrite validationEPSS 0.2%CVE-2026-34212MEDIUMDocmost page content has stored XSS via unsanitized attachment URLsEPSS 0.2%CVE-2026-33193MEDIUMDocmost vulnerable to stored XSS via MIME type spoofingEPSS 0.2%CVE-2026-40927MEDIUMDocmost: XSS in Comments with JavaScript URIEPSS 0.1%