zmister2016

Products

ProductCVEsExploitedLatest
MrDoc3–Nov 2, 2026
zmister2016/mrdoc1–Sep 6, 2021

Exploited and recent CVEs

  • CVE-2026-120427 Medium 4.3 MrDoc through 1.1.1 Missing Authorization via get_doctemp Template Read 0.3%
  • CVE-2026-117563 Medium 5.4 MrDoc through 1.1.1 Broken Access Control via manage_doc_share 0.2%
  • CVE-2026-111645 Medium 5.4 MrDoc through 1.1.1 Missing Authorization via api/import_local_doc/ Endpoint 0.3%
  • CVE-2021-32568 High 7.5 Deserialization of Untrusted Data in zmister2016/mrdoc 0.8%