Description
Docs before 5.4.1 fails to properly revoke websocket collaboration connections when access is revoked at parent documents. Attackers with revoked access can retain real-time read and write access to sub-documents through open websocket sessions that are never disconnected.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
suitenumerique Docs
Default version status: unaffected
0 to < 5.4.1affected
References
- https://github.com/geo-chen/oss/blob/main/docs.md ↗
- https://github.com/suitenumerique/docs/commit/d35b81a6ed526dc284c8d0f68b762f2e81ffab13 ↗
- https://github.com/suitenumerique/docs/blob/v5.3.0/src/backend/core/api/viewsets.py#L2825-L2860 ↗
- https://github.com/suitenumerique/docs ↗
- https://www.vulncheck.com/advisories/docs-before-5.4.1-stale-collaboration-session-after-access-revocation ↗