GHSA-M4HJ-WG2R-QPCR showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Open Redirect in star7th/showdoc

Description Open Redirect at login page due to unchecked "redirect" parameter. Vulnerable parameter redirect Payload /%09/google.com Proof of Concept Send users the following login link https://www.showdoc.com.cn/user/login?redirect=/%09/google.com After users use their registered account to logi...

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The vulnerability exists through the register function in UserController.class.php, allowing an attacker to add any member to the team...

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The server is unable to verify the authenticity of web requests due to a lack of anti-CSRF protection mechanism in the REST API, allowing an attacker to add any member for any item if users visit the attacker site...

Cross-Site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. An attacker can add arbitrary members to the team through the register function in UserController.class.php...

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

CVE-2021-3683 affects the ShowDoc project and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources confirm a CSRF issue in ShowDoc and cite the root cause as inadequate cookie handling/filtering in the software (notably in UserController.class.php), enabli...

CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3775

ShowDoc is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2021-3775). Technical notes across CNVD indicate the issue stems from inadequate filtering/restriction of cookies in UserController.class.php, enabling CSRF exploitation. The vulnerability is documented across multiple ...