PT-2021-21367 · Showdoc · Showdoc

Name of the Vulnerable Software and Affected Versions: showdoc affected versions not specified Description: The issue concerns a missing cryptographic step in showdoc. Specifically, showdoc makes use of a hardcoded salt in its user password hash function. There is no information provided about th...

PT-2021-21351

Name of the Vulnerable Software and Affected Versions showdoc affected versions not specified Description The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG. This means that the random numbers generated by the system may not be sufficiently random,...

CVE-2021-3678: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

showdoc 安全特征问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc in the security features problematic vulnerability , the vulnerability stems from the lack of a limit on the number of client logins and thus vulnerable to password weak pseudo-random number generator PRNG attack...

showdoc 数据伪造问题漏洞

showdoc is open source a great tool for IT teams to share documents online. A data forgery issue vulnerability exists in showdoc, which stems from the vulnerability of showdoc to a lost password step attack...

CVE-2021-3680: Missing Cryptographic Step

showdoc is vulnerable to Missing Cryptographic Step...

Logic Flaw Vulnerability in ShowDoc

ShowDoc is an online API documentation, technical documentation tool for IT teams. ShowDoc suffers from a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Showdoc

ShowDoc an online API documentation, technical documentation tool perfect for IT teams. Showdoc suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery CSRF attacks. The vulnerability exists in /api/teamMember/save where it is possible to add members to a team through CSRF attacks...

Direct Object Reference

ShowDoc is vulnerable to direct object reference. A remote attacker is able to navigate and retrieve or modify notes belonging to other users by modifying the pageid...

CVE-2018-19621

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

Cross site request forgery (csrf)

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

Code injection

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

CVE-2018-19620

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

CVE-2018-19621

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

CVE-2018-19620

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

CVE-2018-19620

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified pageid...

CVE-2018-19621

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

CVE-2018-19620

CVE-2018-19620 affects ShowDoc 2.4.1. A remote attacker can edit another user’s notes by navigating with a modified page_id parameter, revealing a broken access-control/ID-based authorization issue. The connected Red Hat and GitHub advisories corroborate unauthenticated or direct object reference...

CVE-2018-19621

ShowDoc 2.4.2 is affected by a cross-site request forgery (CSRF) in the endpoint server/index.php?s=/api/teamMember/save that can be exploited to add members to a team. This vulnerability is documented across multiple sources (CVE-2018-19621, Red Hat CVE entry, GHSA/OSV notices, and CVE records) ...