471 matches found
CVE-2021-4172
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
CVE-2021-4172
CVE-2021-4172 refers to a Stored XSS in the open-source tool showdoc (GitHub star7th/showdoc) prior to version 2.10.2. Multiple connected sources confirm the vulnerability arises from improper validation of client-side data in the File Library, where uploading an SVG (PoC) can execute script code...
CVE-2021-4172 Cross-site Scripting (XSS) - Stored in star7th/showdoc
Cross-site Scripting XSS - Stored in GitHub repository star7th/showdoc prior to 2.10.2...
showdoc 跨站脚本漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute client-side code...
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
GHSA-5MJ6-3CMQ-FH34 showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
GHSA-7VXC-CHQJ-H83G showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
ShowDoc has an unspecified vulnerability
ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...
CVE-2022-0079
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0079
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
Information disclosure
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0079
CVE-2022-0079 : The vulnerability in showdoc (star7th/showdoc) is described as a generation of an error message containing sensitive information, i.e., a potential information disclosure. The connected documents reiterate this description but do not provide explicit affected versions, exploit det...
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
CVE-2022-0079 Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information...
showdoc 安全漏洞
ShowDoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that stems from the fact that showdoc is prone to generating error messages containing sensitive information. An attacker could exploit this vulnerability to obtain sensitive...
in star7th/showdoc
Description In the recent Showdoc application 925970e7 tag:v2.9.15 I have discovered possibility to enumerate registered users in the system. Proof of Concept Request: POST /server/index.php?s=/api/user/register HTTP/1.1 Host: 172.17.0.3 User-Agent: Mozilla/5.0 X11; Linux x8664; rv:96.0...
showdoc Cross-site Request Forgery Vulnerability (CNVD-2022-02730)
showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a cross-site request forgery vulnerability, which stems from a WEB application that does not sufficiently validate that the request is from a trusted user. An attacker could use this vulnerability to...