CVE-2026-71234 — Documize Community - Attachment Download Authorization Bypass via Non-Validated secure Token
Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and…
Published: 2026-08-05 · CVSS: 7.5 · CVSS 3.1
Documize Community's attachment download route (domain/attachment/endpoint.go, Download function, registered via AddPublic with no auth middleware) accepts a query parameter and grants access whenever the parameter is simply non-empty (len(secureToken) > 0), without comparing it to any server-stored value.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7