DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath.
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://github.com/RainyGao-GitHub/DocSys/issues/48 |
|
History
Wed, 26 Aug 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-08-26T20:40:07.483Z
Reserved: 2026-08-17T00:00:00.000Z
Link: CVE-2026-75413
No data.
Status : Received
Published: 2026-08-26T21:16:41.217
Modified: 2026-08-26T21:16:41.217
Link: CVE-2026-75413
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.