CVE-2026-34376 in PdfDing
요약 (영어)
PdfDing is a selfhosted PDF manager, viewer and editor offering a seamless user experience on multiple devices. Prior to version 1.7.0, an access-control vulnerability allows unauthenticated users to retrieve password-protected shared PDFs by directly calling the file-serving endpoint without completing the password verification flow. This results in unauthorized access to confidential documents that users expected to be protected by a shared-link password. This issue has been patched in version 1.7.0.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
책임이 있는
GitHub_M
예약하다
2026. 03. 27.
공개
2026. 04. 01.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354747 | mrmn2 PdfDing 권한 상승 | 863 | 정의되지 않음 | 공식 수정 | CVE-2026-34376 |