Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-120427 1 Mrdoc 1 Mrdoc 2026-11-06 4.3 Medium
MrDoc through 1.1.1 contains a missing authorization vulnerability in the get_doctemp view that allows authenticated users to read other users' document templates. Attackers can enumerate the sequential doctemp_id POST parameter to retrieve the private template content of every user on the instance.
CVE-2021-32568 1 Mrdoc 1 Mrdoc 2024-11-21 7.8 High
mrdoc is vulnerable to Deserialization of Untrusted Data