| शीर्षक | Newgen Software Newgen OmniDocs 12.0.00 Insecure Direct Object Reference |
|---|
| विवरण | Description:
Newgen OmniDocs 12.0.00 contains an Insecure Direct Object Reference (IDOR) vulnerability in the document retrieval functionality. The application uses a user-supplied DocumentId parameter to fetch documents but fails to properly enforce authorization checks on the requested object. By manipulating this parameter, an attacker can access documents that are not intended to be available through the application interface, including sensitive files such as client-related records and company registration documents. |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/1lYPiqFQd5JoZpIrIh8ohD-7emzGSW0SV/view?usp=sharing |
|---|
| उपयोगकर्ता | kushkira (UID 60170) |
|---|
| सबमिशन | 17/03/2026 02:14 PM (7 महीनों पहले) |
|---|
| संयम | 02/04/2026 10:02 AM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354829 [Newgen OmniDocs तक 12.0.00 WebApiRequestRedirection DocumentId अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|