Lucene search
+L

461 matches found

Github Security Blog
Github Security Blog
added 2022/03/15 12:1 a.m.28 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

7.3CVSS3.1AI score0.0061EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:1 a.m.15 views

GHSA-MG5H-9RHQ-4CQX Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00538EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:1 a.m.30 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

6.3CVSS2.8AI score0.00538EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:1 a.m.20 views

GHSA-82J4-VR25-X394 Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00538EPSS
Exploits1References4
OSV
OSV
added 2022/03/15 12:1 a.m.14 views

GHSA-MW75-QVFR-HPMR Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00631EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:1 a.m.28 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting through file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

7.1CVSS2.8AI score0.00631EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/03/15 12:1 a.m.30 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting due to unrestricted file upload in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

6.3CVSS3.1AI score0.00538EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:1 a.m.24 views

GHSA-QQ74-VGCF-54C3 Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting via viva cshtm file upload in in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

5.4CVSS5.2AI score0.00807EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:1 a.m.24 views

Cross-site Scripting in ShowDoc

ShowDoc is vulnerable to stored cross-site scripting via viva cshtm file upload in in versions 2.10.3 and prior. A patch is available and anticipated to be part of version 2.10.4...

9CVSS3.2AI score0.00807EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:0 a.m.29 views

GHSA-RPHC-H572-2X9F Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

9CVSS5.2AI score0.0084EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/03/15 12:0 a.m.37 views

Cross-site Scripting in showdoc/showdoc

ShowDoc is a tool greatly applicable for an IT team to share documents online. showdoc/showdoc allows .properties files to upload which lead to stored XSS in versions prior to 2.10.4. This allows attackers to execute malicious scripts in the user's browser. This issue was patched in version 2.10....

9CVSS3.4AI score0.0084EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/03/15 12:0 a.m.27 views

GHSA-PCCM-J6VJ-JWWF Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webma file upload...

5.4CVSS5.1AI score0.00888EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/03/15 12:0 a.m.42 views

Cross-site Scripting in ShowDoc

ShowDoc prior to 2.10.4 is vulnerable to stored cross-site scripting via .webma file upload...

9CVSS2.5AI score0.00888EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.4 views

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .m3u8a file extensions in the application's file upload feature. An attacker could exploit this...

7.6CVSS5.8AI score0.00754EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.2 views

showdoc 跨站脚本漏洞

showdoc is open source a great tool for IT teams to share documents online. A security vulnerability exists in showdoc before 2.10.4, which stems from unrestricted file uploads...

8.2CVSS7.1AI score0.0087EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.3 views

showdoc 跨站脚本漏洞

showdoc is an open source tool ideal for IT teams to share documents online. A security vulnerability exists in the GitHub repository star7th/showdoc prior to version 2.4.10, which stems from a cross-site scripting vulnerability via file upload...

6.4CVSS6AI score0.00533EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.6 views

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 contain a file upload vulnerability that stems from the lack of effective detection of .webmv file extensions in the application's file upload feature. An attacker could exploit this...

8CVSS5.8AI score0.00825EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.2 views

showdoc 代码问题漏洞

showdoc is open source a great tool for IT teams to share documents online. A code issue vulnerability exists in showdoc before 2.10.4, which stems from unrestricted file uploads...

6.5CVSS6.3AI score0.00625EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.7 views

showdoc 跨站脚本漏洞

showdoc is open source and a great tool for IT teams to share documents online. showdoc versions prior to 2.10.4 have a security vulnerability that stems from the application allowing the upload of .ofd files, which leads to a cross-site scripting vulnerability. No detailed vulnerability details...

9CVSS5.2AI score0.00888EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/03/15 12:0 a.m.4 views

showdoc 跨站脚本漏洞

showdoc is an open source tool for IT teams to share documents online. showdoc versions prior to v2.10.4 are vulnerable to file uploads, which stem from the lack of effective detection of .md file extensions in the application's file upload feature. An attacker could use this vulnerability to...

7.1CVSS5.8AI score0.00725EPSS
Exploits1References4
Rows per page
Query Builder