Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-89154
HistoryNov 16, 2021 - 12:00 a.m.

ShowDoc Cross-Site Request Forgery Vulnerability

2021-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

0.001 Low

EPSS

Percentile

31.2%

ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software’s UserController.class.php, and can be exploited by attackers to cause cross-site request forgery vulnerabilities.

CPENameOperatorVersion
showdoc showdocle2.9.12

0.001 Low

EPSS

Percentile

31.2%