Lucene search
+L

466 matches found

CNVD
CNVD
added 2022/03/17 12:00 a.m.21 views

showdoc .m3u8a file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .m3u8a file extensions in the application's file upload feature. An attacker could exploit this...

7.6CVSS1.4AI score0.00766EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/03/17 12:00 a.m.17 views

showdoc .md file upload vulnerability

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .md file extensions in the application's file upload feature. An attacker could use this vulnerability to...

7.1CVSS1.5AI score0.00736EPSS
SaveExploits1References1
OSV
OSV
added 2022/03/16 12:00 a.m.21 views

GHSA-VPWQ-6CP4-FFQC Stored Cross-site Scripting in ShowDoc

ShowDoc prior to version 2.10.4 is vulnerable to stored cross-site scripting viva axd and cshtml file upload...

5.4CVSS5.1AI score0.00809EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.35 views

Stored Cross-site Scripting in ShowDoc

ShowDoc prior to version 2.10.4 is vulnerable to stored cross-site scripting viva axd and cshtml file upload...

9CVSS2.1AI score0.00809EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.23 views

GHSA-V94V-PXQP-5QGJ Cross-site Scripting in ShowDoc

The upload feature of ShowDoc prior to version 2.10.4 allows files with the extension .html, which leads to stored cross-site scripting...

5.4CVSS5.2AI score0.00634EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.35 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

7.6CVSS2.5AI score0.00766EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.17 views

GHSA-J6JG-W79C-7P8V File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to a file upload restriction bypass leading to stored cross-site scripting...

6.1CVSS5.9AI score0.00884EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.32 views

File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to a file upload restriction bypass leading to stored cross-site scripting...

8.2CVSS1.8AI score0.00884EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.40 views

Cross-site Scripting in ShowDoc

The upload feature of ShowDoc prior to version 2.10.4 allows files with the extension .html, which leads to stored cross-site scripting...

6.5CVSS0.9AI score0.00634EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.20 views

GHSA-Q73M-3Q7R-FPF7 Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

5.4CVSS5.1AI score0.00766EPSS
SaveExploits1References5
OSV
OSV
added 2022/03/16 12:00 a.m.21 views

GHSA-WG8P-W946-C482 Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

5.4CVSS5.1AI score0.00736EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.40 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via uploading files with files in .xsd, .asa, and .aspx formats...

9.4CVSS2.2AI score0.00752EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.31 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via file upload...

7.1CVSS2.5AI score0.00736EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.34 views

GHSA-9FCC-7G44-MXRJ Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via uploading files with files in .xsd, .asa, and .aspx formats...

5.4CVSS5.1AI score0.00752EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.37 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webmv file upload...

8CVSS2.5AI score0.00838EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.21 views

Stored Cross-site Scripting in showdoc

ShowDoc is a tool for an IT team to share documents online. showdoc contains a stored cross-site scripting vulnerability in the File Library page when uploading a file in .ofd format in versions prior to 2.10.4. At this time, there is no known workaround. Users should update to version 2.10.4...

6.9CVSS1.8AI score0.03262EPSS
SaveExploits4References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/16 12:00 a.m.32 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .ofd file upload...

9CVSS2.5AI score0.00902EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/03/16 12:00 a.m.26 views

GHSA-V8MP-HHJQ-H4CJ Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .ofd file upload...

5.4CVSS5.1AI score0.00902EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/16 12:00 a.m.29 views

GHSA-XM3X-787M-P66R Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webmv file upload...

5.4CVSS5.1AI score0.00838EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/16 12:00 a.m.19 views

GHSA-3PG8-C473-W6RR Stored Cross-site Scripting in showdoc

ShowDoc is a tool for an IT team to share documents online. showdoc contains a stored cross-site scripting vulnerability in the File Library page when uploading a file in .ofd format in versions prior to 2.10.4. At this time, there is no known workaround. Users should update to version 2.10.4...

6.9CVSS5AI score0.03262EPSS
SaveExploits4References4
Rows per page
Query Builder