ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route that allows unauthenticated attackers to read other tenants' documents. Attackers can enumerate sequential admin_user_id and file id query parameters, bypassing the ownership check, to retrieve PDF-rendered pages of any tenant's knowledge-base documents.

Etkilenen sürümler1 yazılım

Kaynaklar8 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…ommit/d1ca145e283e2cb652e0b1002d5f14d6a46671e3 Yama
• github.com/zhimaAi/chatwiki/issues/181 Üçüncü taraf
• vulncheck.com/…d-document-disclosure-via-getlibrawfileonepage Üçüncü taraf
• github.com/zhimaAi/chatwiki Diğer
• github.com/zhimaAi/chatwiki/releases/tag/v2.10.0 Diğer
• github.com/…ernal/app/chatwiki/business/manage/lib_file.go Diğer

Kayıt geçmişi

1. 6 Kas 2026 22:14Yayımlandı

İlgili açıklar

• 4,3 CVE-2026-123782ChatWiki before 2.10.0 Cross-Tenant IDOR via SaveFormField and UpdateFormRequired
• 5,4 CVE-2026-123624ChatWiki before 2.10.0 Cross-Tenant Fast Command Modification via saveFastCommand
• 9,3 CVE-2026-86005Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew
• 6,4 CVE-2026-102610fast-agent: `fast-agent serve` binds HTTP to 0.0.0.0 with no authentication by default; with --shell this is unauthenticated remote command execution
• 8,1 CVE-2026-102344Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server
• 8,8 CVE-2026-65960Tetragon: Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods