Showdoc Unauthenticated Access

2022-05-1301:50:52

Google

osv.dev

0.001 Low

EPSS

Percentile

47.3%

JSON

ShowDoc 2.4.1 allows remote attackers to edit other users’ notes by navigating with a modified page_id.

CPENameOperatorVersion
showdoc/showdoceq1.0.3
showdoc/showdoceq2.1.0
showdoc/showdoceq2.3.1
showdoc/showdoceq1.8.0
showdoc/showdoceq2.3.0
showdoc/showdoceq1.4.0
showdoc/showdoceq1.3.3
showdoc/showdoceq1.6.2
showdoc/showdoceq1.1.3
showdoc/showdoceq2.8.11

Name	Operator	Version
showdoc/showdoc	eq	1.0.3
showdoc/showdoc	eq	2.1.0
showdoc/showdoc	eq	2.3.1
showdoc/showdoc	eq	1.8.0
showdoc/showdoc	eq	2.3.0
showdoc/showdoc	eq	1.4.0
showdoc/showdoc	eq	1.3.3
showdoc/showdoc	eq	1.6.2
showdoc/showdoc	eq	1.1.3
showdoc/showdoc	eq	2.8.11