520 matches found
CVE-2022-0079
CVE-2022-0079 : The vulnerability in showdoc (star7th/showdoc) is described as a generation of an error message containing sensitive information, i.e., a potential information disclosure. The connected documents reiterate this description but do not provide explicit affected versions, exploit det...
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0079: Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
showdoc 安全漏洞
ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...
in star7th/showdoc
Description In the recent Showdoc application 925970e7 tag:v2.9.15 I have discovered possibility to enumerate registered users in the system. Proof of Concept Request: POST /server/index.php?s=/api/user/register HTTP/1.1 Host: 172.17.0.3 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:96.0...
showdoc Cross-site Request Forgery Vulnerability (CNVD-2022-02730)
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...
CVE-2021-4168
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4168
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4168
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4168
CVE-2021-4168 is a CSRF vulnerability in the open-source tool showdoc (star7th/showdoc). The CVE entry documents Cross-Site Request Forgery affecting showdoc, with references to multiple advisories (GHSA, CNVD, CNVD, OSV, NVD) indicating CSRF exploitation potential. Some connected sources (HuntrP...
CVE-2021-4168 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc 跨站请求伪造漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...
CVE-2021-4168: Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
Cross-Site Request Forgery (CSRF) in star7th/showdoc
Description I found that the CSRF vulnerability that I reported to you before https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcd/ can still be exploited via the GET request. An attacker is able to do unintentional action in the victim account by tricking other users clicking on the...
GHSA-8C9X-WFGJ-V78W Open Redirect in showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site...
Open Redirect in showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site...
ShowDoc Input Validation Error Vulnerability (CNVD-2021-95596)
ShowDoc is open source a great tool for IT teams to share documents online. ShowDoc suffers from an input validation error vulnerability that stems from showdoc's susceptibility to URL redirection to untrusted sites. No detailed vulnerability details are provided at this time...