toeverything AFFiNE Authorization Bypass Vulnerability in Public Markdown Preview Endpoint

An authorization bypass vulnerability has been identified in toeverything AFFiNE versions prior to 0.26.3. The issue arises in the Public Markdown Preview Endpoint, specifically within the allowDocPreview function of the file /workspace/:workspaceId/:docId. This vulnerability can be exploited remotely, allowing unauthorized access to document previews.

Impact

Exploitation of this vulnerability allows for unauthorized access to document previews, bypassing normal authorization controls.

Reproduction

The vulnerability can be reproduced by sending a request to the Public Markdown Preview Endpoint with a specified workspaceId and docId. The request will bypass authorization checks, allowing access to the requested document preview without the necessary permissions.