https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 23:00:41 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-38587 <p>An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information, such as the Owner&#39;s unique identifier (ID) and profile information, which should only be accessible to administrators.</p> <p>An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information, such as the Owner&#39;s unique identifier (ID) and profile information, which should only be accessible to administrators.</p> https://db.gcve.eu/vuln/fkie_cve-2026-38587 https://db.gcve.eu/vuln/ghsa-fg53-m88f-73jq <p>An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information, such as the Owner&#39;s unique identifier (ID) and profile information, which should only be accessible to administrators.</p> <p>An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-level permissions (User or Guest) to retrieve sensitive information, such as the Owner&#39;s unique identifier (ID) and profile information, which should only be accessible to administrators.</p> https://db.gcve.eu/vuln/ghsa-fg53-m88f-73jq