CVE-2026-40265

{
  "id": "CVE-2026-40265",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-17T01:17:40.293",
  "lastModified": "2026-10-26T22:10:00.163",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the asset download endpoint at /api/notes/{noteID}/assets/{assetID} is registered without authentication middleware, and the backend query does not verify ownership or book visibility. An unauthenticated user who knows a valid note ID and asset ID can retrieve the full contents of private note assets without authentication, regardless of whether the associated book is public or private. This issue has been fixed in version 0.19.2."
    },
    {
      "lang": "es",
      "value": "Note Mark es una aplicación de código abierto para tomar notas. En las versiones 0.19.1 y anteriores, el endpoint de descarga de activos en /api/notes/{noteID}/assets/{assetID} está registrado sin middleware de autenticación, y la consulta del backend no verifica la propiedad o la visibilidad del libro. Un usuario no autenticado que conoce un ID de nota y un ID de activo válidos puede recuperar el contenido completo de activos de notas privadas sin autenticación, independientemente de si el libro asociado es público o privado. Este problema ha sido solucionado en la versión 0.19.2."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "enchant97",
          "product": "note-mark",
          "versions": [
            {
              "version": "< 0.19.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-17T18:40:35.700177Z",
          "id": "CVE-2026-40265",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/enchant97/note-mark/commit/6593898855add151eb9965d96998b05e14c62026",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/enchant97/note-mark/releases/tag/v0.19.2",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/enchant97/note-mark/security/advisories/GHSA-p5w6-75f9-cc2p",
      "source": "[email protected]"
    }
  ]
}