Lucene search
+L

461 matches found

Github Security Blog
Github Security Blog
added 2022/01/06 10:22 p.m.27 views

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS1.5AI score0.00969EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/01/06 10:2 p.m.17 views

GHSA-7VXC-CHQJ-H83G showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.3CVSS8.7AI score0.00614EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/01/06 10:2 p.m.25 views

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS3.8AI score0.00614EPSS
Exploits1References4Affected Software1
CNVD
CNVD
added 2022/01/05 12:0 a.m.47 views

ShowDoc has an unspecified vulnerability

ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...

5.3CVSS1.7AI score0.00969EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/03 3:15 a.m.5 views

CVE-2022-0079

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.8AI score0.00969EPSS
Exploits1References3
NVD
NVD
added 2022/01/03 3:15 a.m.31 views

CVE-2022-0079

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS0.00969EPSS
Exploits1References2
Prion
Prion
added 2022/01/03 3:15 a.m.6 views

Information disclosure

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5CVSS5.2AI score0.00969EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2022/01/03 3:0 a.m.74 views

CVE-2022-0079

CVE-2022-0079 : The vulnerability in showdoc (star7th/showdoc) is described as a generation of an error message containing sensitive information, i.e., a potential information disclosure. The connected documents reiterate this description but do not provide explicit affected versions, exploit det...

5.3CVSS5.1AI score0.00969EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/03 3:0 a.m.25 views

CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.5AI score0.00969EPSS
Exploits1References2
OSV
OSV
added 2022/01/03 3:0 a.m.25 views

CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...

5.3CVSS5.4AI score0.00969EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/01/03 12:0 a.m.7 views

showdoc 安全漏洞

ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...

5.3CVSS5.6AI score0.00969EPSS
Exploits1References3
Huntr
Huntr
added 2021/12/30 5:40 p.m.30 views

in star7th/showdoc

Description In the recent Showdoc application 925970e7 tag:v2.9.15 I have discovered possibility to enumerate registered users in the system. Proof of Concept Request: POST /server/index.php?s=/api/user/register HTTP/1.1 Host: 172.17.0.3 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:96.0...

5CVSS5.2AI score0.00969EPSS
Exploits1References1
CNVD
CNVD
added 2021/12/28 12:0 a.m.27 views

showdoc Cross-site Request Forgery Vulnerability (CNVD-2022-02730)

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...

8.8CVSS3.6AI score0.00614EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/26 2:15 p.m.6 views

CVE-2021-4168

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS6.8AI score0.00614EPSS
Exploits1References3
NVD
NVD
added 2021/12/26 2:15 p.m.12 views

CVE-2021-4168

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS0.00614EPSS
Exploits1References2
OSV
OSV
added 2021/12/26 2:15 p.m.12 views

CVE-2021-4168

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

8.8CVSS6.9AI score
Exploits0References2
Prion
Prion
added 2021/12/26 2:15 p.m.13 views

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.8CVSS8.8AI score0.00614EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/12/26 1:20 p.m.70 views

CVE-2021-4168

CVE-2021-4168 is a CSRF vulnerability in the open-source tool showdoc (star7th/showdoc). The CVE entry documents Cross-Site Request Forgery affecting showdoc, with references to multiple advisories (GHSA, CNVD, CNVD, OSV, NVD) indicating CSRF exploitation potential. Some connected sources (HuntrP...

8.8CVSS7.4AI score0.00614EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/26 1:20 p.m.17 views

CVE-2021-4168 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

6.3CVSS9AI score0.00614EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/12/26 12:0 a.m.3 views

showdoc 跨站请求伪造漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...

8.8CVSS5.5AI score0.00614EPSS
Exploits1References3
Rows per page
Query Builder