CNNVD-202601-2588 Information
CNNVD ID
CNNVD-202601-2588
Related CVE
- CNNVD Published: 2026-01-15
Description (Chinese)
La Suite Docs是La Suite numérique开源的一个可扩展的协作笔记、维基和文档平台。 La Suite Docs 3.8.0版本至4.3.0版本存在跨站脚本漏洞，该漏洞源于Interlinking功能未验证URL，可能导致存储型跨站脚本攻击。
Description (English)
La Suite Docs is a scalable collaborative notebook, Wiki and documentation platform from the open source La Suite Numérique. Versions 3.8.0 to 4.3.0 of La Suite Docs have a cross-site script loophole, which originates from the failure of the Interlinking function to verify URLs, which may result in a storage-type cross-station script attack.
Hazard Level
Medium
Vulnerability Type
跨站脚本
Affected Vendor
La Suite numérique
Published
2026-01-15
Last Modified
2026-02-24
References
https://github.com/suitenumerique/docs/commit/e807237dbedbc189230296b81c3aeccc1c04fa77 https://github.com/suitenumerique/docs/releases/tag/v4.4.0 https://github.com/suitenumerique/docs/security/advisories/GHSA-4rwv-ghwh-9rv6
Patch
https://github.com/suitenumerique/docs/releases
Share on: