CVE-2018-19609

2018-11-2716:29:01

Google

osv.dev

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.3%

JSON

ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.

CPENameOperatorVersion
showdoceq2.2.1
showdoceq1.6.0
showdoceq2.1.5
showdoceq2.0.7
showdoceq1.4.7
showdoceq1.3.6
showdoceq1.4.1
showdoceq1.3.2
showdoceq1.0.5
showdoceq1.8.0