Showdoc CSRF Vulnerability

2022-05-1401:45:29

Google

osv.dev

0.001 Low

EPSS

Percentile

26.3%

JSON

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

CPENameOperatorVersion
showdoc/showdoceq1.0.3
showdoc/showdoceq1.2.5
showdoc/showdoceq1.7.2
showdoc/showdoceq1.0.0
showdoc/showdoceq1.2.3
showdoc/showdoceq1.2.1
showdoc/showdoceq1.4.7
showdoc/showdoceq2.1.0
showdoc/showdoceq1.5.3
showdoc/showdoceq1.2.4

Name	Operator	Version
showdoc/showdoc	eq	1.0.3
showdoc/showdoc	eq	1.2.5
showdoc/showdoc	eq	1.7.2
showdoc/showdoc	eq	1.0.0
showdoc/showdoc	eq	1.2.3
showdoc/showdoc	eq	1.2.1
showdoc/showdoc	eq	1.4.7
showdoc/showdoc	eq	2.1.0
showdoc/showdoc	eq	1.5.3
showdoc/showdoc	eq	1.2.4