The LaSuite Doc platform, used for collaborative note‑taking and documentation, contains a flaw in the search API. From versions 4.8.2 through 5.4.0 the endpoint GET /api/v1.0/documents/search/ accepts seven‑digit document path values that represent hierarchical paths. An unauthenticated user can submit an empty search query and then iterate through predictable path numbers, causing the service to enumerate all public document subtrees. For each discovered path the API returns the document’s identifier, title, creator information, timestamps, and tree metadata. Those identifiers can subsequently be used with public‑document endpoints to retrieve full content, and the differing 403 Forbidden and 404 Not Found responses reveal whether a guessed path truly exists. This allows an attacker to systematically enumerate all publicly available documents and gain access to potentially sensitive metadata.

The vulnerability affects the suitenumerique docs application, versions 4.8.2 up to and including 5.4.0. The flaw was identified and corrected in the 5.4.0 release. Any deployment running an older snapshot, especially the 5.3.x release series, is susceptible. Installations that have not yet upgraded remain exposed until the fix is applied.

The CVSS score of 6.5 indicates a medium severity information‑disclosure risk. EPSS is not available, and the issue is not listed in CISA's KEV catalog, which suggests there has not yet been a known widespread exploitation. Attackers could exploit this flaw remotely without authentication through normal HTTP requests, automatically scanning the path space to enumerate documents. The impact is primarily the disclosure of document identifiers and metadata, which could lead to further compromise if those documents contain confidential information. Because the flaw is properly fixed in 5.4.0, the most effective mitigation is to update the affected package.