Vulnerability in mindoc-org MinDoc

[ Description ]Official description

MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any book can name that book and iterate sequential document ids to read markdown and HTML from private books.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• github.com/mindoc-org/mindoc
• github.com/mindoc-org/mindoc/blob/v2.2-beta.2/controllers/DocumentController.go
• github.com/mindoc-org/mindoc/blob/v2.2-beta.2/routers/router.go
• hackmd.io/@hieuPenguinnn/mindoc-api-content-get-cross-book-document-idor
• www.vulncheck.com/advisories/mindoc-through-2.2-beta.2-idor-via-api-key-content-id-get-…