La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers who know a thread UUID can route a POST comment request through their own document’s resource_id, inserting comments into another document’s thread without access.
2026年10月16日
CVE-2026-111169 [LOW] – La Suite Docs through 6.0.0 contains an authorization bypass vulnerability that allows aut
📑 文章目录
