465 matches found
CVE-2021-3678 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3680
CVE-2021-3680 relates to showdoc and centers on a missing cryptographic step due to a hardcoded salt in the user password hash function. Documents from GHSA-8VH3-29MR-M9XG and PT-2021-21367 confirm this flaw and describe the use of a fixed salt, implying weaknesses in password hashing. No concret...
CVE-2021-3680 Missing Cryptographic Step in star7th/showdoc
showdoc is vulnerable to Missing Cryptographic Step...
PT-2021-21367 · Showdoc · Showdoc
Name of the Vulnerable Software and Affected Versions: showdoc affected versions not specified Description: The issue concerns a missing cryptographic step in showdoc. Specifically, showdoc makes use of a hardcoded salt in its user password hash function. There is no information provided about th...
showdoc 安全特征问题漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showdoc in the security features problematic vulnerability , the vulnerability stems from the lack of a limit on the number of client logins and thus vulnerable to password weak pseudo-random number generator PRNG attack...
showdoc 数据伪造问题漏洞
showdoc is open source a great tool for IT teams to share documents online. A data forgery issue vulnerability exists in showdoc, which stems from the vulnerability of showdoc to a lost password step attack...
Logic Flaw Vulnerability in ShowDoc
ShowDoc is an online API documentation, technical documentation tool for IT teams. ShowDoc suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
File Upload Vulnerability in Showdoc
ShowDoc an online API documentation, technical documentation tool perfect for IT teams. Showdoc suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...
Cross-site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery CSRF attacks. The vulnerability exists in /api/teamMember/save where it is possible to add members to a team through CSRF attacks...
Direct Object Reference
ShowDoc is vulnerable to direct object reference. A remote attacker is able to navigate and retrieve or modify notes belonging to other users by modifying the pageid...
Code injection
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...
CVE-2018-19621
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...
CVE-2018-19620
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...
CVE-2018-19621
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...
Cross site request forgery (csrf)
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...
CVE-2018-19620
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...
CVE-2018-19621
ShowDoc 2.4.2 is affected by a cross-site request forgery (CSRF) in the endpoint server/index.php?s=/api/teamMember/save that can be exploited to add members to a team. This vulnerability is documented across multiple sources (CVE-2018-19621, Red Hat CVE entry, GHSA/OSV notices, and CVE records) ...
CVE-2018-19620
ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...
CVE-2018-19620
CVE-2018-19620 affects ShowDoc 2.4.1. A remote attacker can edit another user’s notes by navigating with a modified page_id parameter, revealing a broken access-control/ID-based authorization issue. The connected Red Hat and GitHub advisories corroborate unauthenticated or direct object reference...