mindoc-org CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH mindoc-org CVE published 2026-10-15

CVE-2026-111364

CVE-2026-111364 is a high-severity vulnerability in MinDoc through 2.2-beta.2, allowing authenticated users to read documents from unauthorized books via an insecure direct object reference (IDOR) vulnerability in the DocumentController.Content API endpoint. This vulnerability enables attackers with non-observer roles to iterate sequential document IDs and access markdown and HTML content from private boo [truncated]