showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94821)

showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3989

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3989

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

Code injection

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Design/Logic Flaw

showdoc is vulnerable to URL Redirection to Untrusted Site...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3989 Open Redirect in star7th/showdoc

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3989

CVE-2021-3989 concerns showdoc and is described across multiple sources as an Open Redirect (URL Redirection to Untrusted Site). The CVE entry ties the vulnerability to the showdoc project by star7th and is listed in CVE records as an Open Redirect vulnerability. Connected documents corroborate t...

CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3990

Technical details (affected versions, root cause specifics, and fixes) for CVE-2021-3990 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases.