Missing Authorization in MrDoc Allows Access to Private Document Templates
CVE-2026-120427

5.3MEDIUM

Key Information:

Vendor

Zmister2016

Status
Mrdoc
Vendor
CVE Published:
2 November 2026

What is CVE-2026-120427?

MrDoc version 1.1.1 has a vulnerability where authenticated users can exploit a missing authorization check in the get_doctemp view. This flaw enables them to access document templates belonging to other users within the application by manipulating the doctemp_id POST parameter. Consequently, attackers can potentially enumerate and retrieve sensitive content from private templates, leading to unauthorized information disclosure across the user base.

Affected Version(s)

MrDoc 0 <= 1.1.1

References

https://github.com/zmister2016/MrDoc/commit/ec93679499fb6...
patch
https://github.com/zmister2016/MrDoc/blob/v1.1.1/app_doc/...
technical-description
https://github.com/zmister2016/MrDoc/releases/tag/v1.1.1
release-notes

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hieuPenguinnn
yangjian
.