Docmost Cross-Page Attachment Overwrite Vulnerability

A remote integrity vulnerability has been identified in Docmost, an open-source collaborative wiki and documentation software. This issue affects versions 0.3.0 prior to 0.71.0. The vulnerability arises from improper authorization, allowing low-privileged authenticated users to overwrite attachments on another page within the same workspace. Exploitation involves sending a victim's attachment ID to the 'POST /api/files/upload' endpoint. Notably, this issue requires no interaction from the victim.

Impact

Exploitation of this vulnerability allows for unauthorized overwriting of attachments, potentially leading to loss or corruption of data.

Remediation

Users can upgrade to Docmost version 0.71.0 or later to address this vulnerability.