Vulnerabilities in docmost
14 resultsCVE-2026-22249HIGHDocmost affected by an Arbitrary File Write via Zip Import Feature (ZipSlip)EPSS 0.6%CVE-2026-48070HIGHDocmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletionEPSS 0.4%CVE-2026-48072MEDIUMDocmost: Public image fileName path traversal leads to unauthorized local file readEPSS 0.3%CVE-2026-33146MEDIUMDocmost's Public Share Search Exposes Metadata of Restricted ChildrenEPSS 0.3%CVE-2026-65827MEDIUMDocmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of serviceEPSS 0.3%CVE-2026-23630MEDIUMDocmost is vulnerable to stored Cross-Site Scripting (XSS) through Mermaid renderingEPSS 0.3%CVE-2026-34213MEDIUMDocmost has cross-page attachment overwrite via flawed attachmentId overwrite validationEPSS 0.3%CVE-2026-24045HIGHDocmost Affected by Stored XSS in Public Share PageEPSS 0.3%CVE-2026-34212MEDIUMDocmost page content has stored XSS via unsanitized attachment URLsEPSS 0.2%CVE-2026-33193MEDIUMDocmost vulnerable to stored XSS via MIME type spoofingEPSS 0.2%CVE-2026-40927MEDIUMDocmost: XSS in Comments with JavaScript URIEPSS 0.2%CVE-2026-52853MEDIUMDocmost: Privilege Escalation - ADMIN Can Invite Users as OWNEREPSS 0.2%CVE-2026-48073MEDIUMDocmost: Page export can include restricted same-space attachments through forged attachmentIdEPSS 0.2%CVE-2026-52850MEDIUMDocmost: Broken access control in transclusion lookup API leaks sync-block content across private spacesEPSS 0.2%