Showdoc Forced Browsing

2022-05-1401:45:51

Google

osv.dev

0.002 Low

EPSS

Percentile

56.3%

JSON

ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.

CPENameOperatorVersion
showdoc/showdoceq1.0.3
showdoc/showdoceq1.2.5
showdoc/showdoceq1.7.2
showdoc/showdoceq1.0.0
showdoc/showdoceq1.2.3
showdoc/showdoceq1.2.1
showdoc/showdoceq1.4.7
showdoc/showdoceq2.1.0
showdoc/showdoceq1.5.3
showdoc/showdoceq1.2.4

Name	Operator	Version
showdoc/showdoc	eq	1.0.3
showdoc/showdoc	eq	1.2.5
showdoc/showdoc	eq	1.7.2
showdoc/showdoc	eq	1.0.0
showdoc/showdoc	eq	1.2.3
showdoc/showdoc	eq	1.2.1
showdoc/showdoc	eq	1.4.7
showdoc/showdoc	eq	2.1.0
showdoc/showdoc	eq	1.5.3
showdoc/showdoc	eq	1.2.4