Vulnerability Description
DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Related Weaknesses (CWE)
References
- https://github.com/RainyGao-GitHub/DocSys/issues/48
- https://github.com/RainyGao-GitHub/DocSys/issues/48
FAQ
What is CVE-2026-75413?
CVE-2026-75413 is a vulnerability with a CVSS score of 7.5 (HIGH). DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
How severe is CVE-2026-75413?
CVE-2026-75413 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75413?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.