464 matches found
CVE-2021-3989
CVE-2021-3989 concerns showdoc and is described across multiple sources as an Open Redirect (URL Redirection to Untrusted Site). The CVE entry ties the vulnerability to the showdoc project by star7th and is listed in CVE records as an Open Redirect vulnerability. Connected documents corroborate t...
CVE-2021-3990
Technical details (affected versions, root cause specifics, and fixes) for CVE-2021-3990 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases.
CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3993 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3993
CVE-2021-3993 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the open-source web tool showdoc (notably in the star7th/showdoc project). The connected advisories describe CSRF as the underlying issue enabling attackers to forge state-changing requests. Some sources provide PoCs and...
CVE-2021-4017
CVE-2021-4017 affects the open‑source documentation tool showdoc . The connected documents confirm a Cross‑Site Request Forgery (CSRF) vulnerability enabling unauthorized state‑changing requests via the authenticated user’s browser; CNVD notes an exploit path: "/server/index.php?s=/api/itemGroup/...
CVE-2021-4017 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc 安全特征问题漏洞
showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...
showdoc 跨站请求伪造漏洞
showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...
showdoc 输入验证错误漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showDoc is vulnerable to an input validation error, which can be exploited by attackers to perform URL redirection attacks...
showdoc 跨站请求伪造漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...
Cross-Site Request Forgery (CSRF) in star7th/showdoc
Description An attacker is able to create a new group for any item if users visit the attacker's website. Furthermore, the user-id "uid" is also exposed via the JSON response. We can bypass the CSRF Protection if we put our payload on an iframe or an HTML file and then send them to the victim...
ShowDoc Cross-Site Request Forgery Vulnerability (CNVD-2021-89159)
ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, which can be exploited by attackers to cause a...
ShowDoc Cross-Site Request Forgery Vulnerability
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
ShowDoc Cross-Site Request Forgery Vulnerability
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-PJJF-HC4Q-G298 showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...