Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-89159
HistoryNov 16, 2021 - 12:00 a.m.

ShowDoc Cross-Site Request Forgery Vulnerability (CNVD-2021-89159)

2021-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.001 Low

EPSS

Percentile

31.2%

ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software’s UserController.class.php, which can be exploited by attackers to cause a cross-site request forgery vulnerability.

CPENameOperatorVersion
showdoc showdocle2.9.12

0.001 Low

EPSS

Percentile

31.2%