WofficeIO Woffice Core Authorization Bypass Vulnerability in Access Control

Vulnerability

An authorization bypass vulnerability has been identified in WofficeIO Woffice Core versions through 5.4.30. This vulnerability allows exploitation of incorrectly configured access control security levels, potentially leading to unauthorized access or actions.

Impact

Exploitation of this vulnerability could result in unauthorized access to restricted areas or functions within the application, bypassing normal access controls.

Added: Jan 8, 2026, 10:35 AM
Updated: Jan 8, 2026, 7:13 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
1.3
exploitability
6.2
remediation
0.0
relevance
1.9
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.