Beveiligingsadvies

CVE-2026-82472

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-29 16:35:32

Laatst bijgewerkt 2026-08-31 18:52:46

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked document records.

← Alle CVE's bekijken Bekijk op cve.org ↗