CyberRota Analysis
AI-GeneratedDocumenso 2.17.0 is vulnerable due to inadequate access control in its PDF-serving endpoint, allowing attackers with low privileges to access restricted documents across teams or tenants. This could lead to unauthorized disclosure of sensitive information. Organizations using this version should prioritize remediation to mitigate potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings. Attackers with low privileges can read restricted documents within their team or cross-tenant by leveraging missing ownership validation on document data identifiers.