CVE-2022-0940

2022-03-1411:15:08

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

JSON

Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

CPENameOperatorVersion
showdoceq2.2.1
showdoceq2.1.1
showdoceq2.9.5
showdoceq2.3.1
showdoceq2.8.14
showdoceq2.0.2
showdoceq1.2.0
showdoceq1.8.0
showdoceq2.4.8
showdoceq1.4.0

Name	Operator	Version
showdoc	eq	2.2.1
showdoc	eq	2.1.1
showdoc	eq	2.9.5
showdoc	eq	2.3.1
showdoc	eq	2.8.14
showdoc	eq	2.0.2
showdoc	eq	1.2.0
showdoc	eq	1.8.0
showdoc	eq	2.4.8
showdoc	eq	1.4.0

Rows per page:

1-10 of 1401

References

github.com/star7th/showdoc/commit/78522520892d4e29cc94148c6ec84a204a607b73

huntr.dev/bounties/856bd2e2-db4f-4b7d-9927-222261ae3782