Appflowy Io
Monthly
Cross-tenant authorization bypass in AppFlowy-Cloud 0.7.2 through 0.9.64 allows any authenticated user to publish arbitrary content into another tenant's workspace namespace via the unguarded bulk publish endpoint. The flaw stems from missing workspace membership validation in the publish path (src/biz/workspace/publish.rs), enabling horizontal privilege escalation across tenant boundaries - attackers can inject attacker-controlled titles, body text, and metadata into victim organizations' public workspace URLs to stage phishing pages or deface legitimate content. A publicly available proof-of-concept exploit (VulnCheck / mtholmquist gist) is available, materially lowering the bar for abuse in multi-tenant AppFlowy-Cloud deployments.
Cross-workspace IDOR authorization bypass in AppFlowy-Cloud 0.9.64 allows authenticated users to read, modify, or delete documents and database rows belonging to other users' workspaces. The Casbin-based access control layer in `libs/access-control/src/casbin/collab.rs` validates a user's membership in their own workspace but fails to confirm that the requested collab object actually belongs to that workspace, enabling object ID substitution attacks across the HTTP API. No public exploit code has been identified at time of analysis, though the flaw is fully documented in a public GitHub issue.
SQL injection in AppFlowy Cloud's qcuiknote feature enables authenticated users to exfiltrate arbitrary data from the underlying database. Affecting all tracked versions of cpe:2.3:a:appflowy-io:appflowy-cloud, this vulnerability carries a CVSS 4.0 score of 7.1 driven by high confidentiality impact and network reachability at low complexity. A proof-of-concept exploit is publicly available from Project Black (PRJBLK), materially elevating real-world risk; no vendor-released patch has been identified at time of analysis.
Cross-workspace data exfiltration in AppFlowy-Cloud through 0.9.64 allows authenticated users to read documents and databases from workspaces they are not members of. The `establish_ws_connection_v2` WebSocket handler in `src/api/ws.rs` omits workspace membership validation, permitting any valid session to bind to arbitrary workspace contexts. By subsequently transmitting sync Manifest messages containing victim object identifiers, an attacker retrieves full collaboration document and database state without any victim interaction required. No public exploit identified at time of analysis, though the VulnCheck advisory and referenced GitHub issue provide sufficient technical detail to reconstruct the attack.
Cross-tenant authorization bypass in AppFlowy-Cloud 0.7.2 through 0.9.64 allows any authenticated user to publish arbitrary content into another tenant's workspace namespace via the unguarded bulk publish endpoint. The flaw stems from missing workspace membership validation in the publish path (src/biz/workspace/publish.rs), enabling horizontal privilege escalation across tenant boundaries - attackers can inject attacker-controlled titles, body text, and metadata into victim organizations' public workspace URLs to stage phishing pages or deface legitimate content. A publicly available proof-of-concept exploit (VulnCheck / mtholmquist gist) is available, materially lowering the bar for abuse in multi-tenant AppFlowy-Cloud deployments.
Cross-workspace IDOR authorization bypass in AppFlowy-Cloud 0.9.64 allows authenticated users to read, modify, or delete documents and database rows belonging to other users' workspaces. The Casbin-based access control layer in `libs/access-control/src/casbin/collab.rs` validates a user's membership in their own workspace but fails to confirm that the requested collab object actually belongs to that workspace, enabling object ID substitution attacks across the HTTP API. No public exploit code has been identified at time of analysis, though the flaw is fully documented in a public GitHub issue.
SQL injection in AppFlowy Cloud's qcuiknote feature enables authenticated users to exfiltrate arbitrary data from the underlying database. Affecting all tracked versions of cpe:2.3:a:appflowy-io:appflowy-cloud, this vulnerability carries a CVSS 4.0 score of 7.1 driven by high confidentiality impact and network reachability at low complexity. A proof-of-concept exploit is publicly available from Project Black (PRJBLK), materially elevating real-world risk; no vendor-released patch has been identified at time of analysis.
Cross-workspace data exfiltration in AppFlowy-Cloud through 0.9.64 allows authenticated users to read documents and databases from workspaces they are not members of. The `establish_ws_connection_v2` WebSocket handler in `src/api/ws.rs` omits workspace membership validation, permitting any valid session to bind to arbitrary workspace contexts. By subsequently transmitting sync Manifest messages containing victim object identifiers, an attacker retrieves full collaboration document and database state without any victim interaction required. No public exploit identified at time of analysis, though the VulnCheck advisory and referenced GitHub issue provide sufficient technical detail to reconstruct the attack.