Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-13543
Received
More InfoOfficial Page
Source-cna@vuldb.com
View Known Exploited Vulnerability (KEV) details
Published At-29 Jun, 2026 | 07:16
Updated At-29 Jun, 2026 | 12:16

A vulnerability was detected in Documenso up to 2.11.0. Affected by this vulnerability is an unknown functionality of the file packages/auth/server/lib/utils/handle-oauth-callback-url.ts of the component Google OAuth Login. The manipulation results in improper authentication. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.02.9LOW
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary3.15.6MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Secondary2.05.1MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P
N/A
Type: Secondary
Version: 4.0
Base score: 2.9
Base severity: LOW
Vector:
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Type: Secondary
Version: 3.1
Base score: 5.6
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Type: Secondary
Version: 2.0
Base score: 5.1
Base severity: MEDIUM
Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P
Type: N/A
Version:
Base score:
Base severity: N/A
Vector:
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-287Secondarycna@vuldb.com
CWE ID: CWE-287
Type: Secondary
Source: cna@vuldb.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/documenso/documenso/cna@vuldb.com
N/A
https://github.com/documenso/documenso/issues/2758cna@vuldb.com
N/A
https://github.com/documenso/documenso/pull/2837cna@vuldb.com
N/A
https://vuldb.com/cve/CVE-2026-13543cna@vuldb.com
N/A
https://vuldb.com/submit/842579cna@vuldb.com
N/A
https://vuldb.com/vuln/374551cna@vuldb.com
N/A
https://vuldb.com/vuln/374551/cticna@vuldb.com
N/A
Hyperlink: https://github.com/documenso/documenso/
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/documenso/documenso/issues/2758
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://github.com/documenso/documenso/pull/2837
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/cve/CVE-2026-13543
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/submit/842579
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/374551
Source: cna@vuldb.com
Resource: N/A
Hyperlink: https://vuldb.com/vuln/374551/cti
Source: cna@vuldb.com
Resource: N/A
Change History
0Changes found

Details not found