CVE-2018-19621

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

CVE-2018-19621

ShowDoc 2.4.2 is affected by a cross-site request forgery (CSRF) in the endpoint server/index.php?s=/api/teamMember/save that can be exploited to add members to a team. This vulnerability is documented across multiple sources (CVE-2018-19621, Red Hat CVE entry, GHSA/OSV notices, and CVE records) ...