Executive Summary

This vulnerability exists in Docmost, an open-source collaborative wiki and documentation software. In versions starting from 0.3.0 up to but not including 0.71.0, there is an improper authorization issue. A low-privileged authenticated user can overwrite another page's attachment within the same workspace by providing the victim's attachment ID to the POST /api/files/upload endpoint. This means an attacker with limited permissions can modify files they should not have access to without requiring any interaction from the victim.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is primarily on data integrity. An attacker with low privileges can overwrite attachments belonging to other users within the same workspace, potentially replacing important files with malicious or corrupted content. This could disrupt collaboration, cause loss of important information, or introduce malicious files into the system. Since the attack requires no victim interaction and can be performed remotely, it increases the risk of unauthorized data modification.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Docmost to version 0.71.0 or later, as this version contains the patch that fixes the improper authorization issue allowing low-privileged users to overwrite attachments.

Useful 0 Not Useful 0