CNNVD-202601-4056 Information

CNNVD ID

CNNVD-202601-4056

CVE-2025-69907

  • CNNVD Published: 2026-01-23

Description (Chinese)

Newgen OmniDocs是Newgen公司的一个企业内容管理套件。 Newgen OmniDocs存在安全漏洞,该漏洞源于/omnidocs/GetListofCabinet API端点缺少身份验证和访问控制,可能导致远程攻击者未经授权检索敏感内部配置信息。

Description (English)

Newgen OmniDocs is an enterprise content management package for Newgen. Newgen OmniDocs has a security loophole that stems from the lack of identification and access controls at the /omnidocs/GetListofCabinet API endpoint, which may lead to unauthorized access to sensitive internal configuration information by remote assailants.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Newgen

Published

2026-01-23

Last Modified

2026-02-24

References

https://github.com/CBx216/CVE-Newgen-Software-Advisories/blob/main/CVE-2025-69907.md https://newgensoft.com/ https://access.redhat.com/security/cve/cve-2025-69907

Share on: