CVE-2023-54402

The iDocView application is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability in its /doc/upload endpoint. Unauthenticated remote attackers can bypass authentication by providing a hardcoded default token value (testtoken ). The root cause is unrestricted URL scheme handling, which...

EUVD-2023-60698

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value testtoken to bypass authentication. Attackers can exploit the unrestricted URL scheme handlin...