Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The library does not verify the authenticity of requests due to a lack of anti-CSRF protection, allowing an attacker to create a new group for any item if users visit the attacker site...

showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94820)

showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...

showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94821)

showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...

showdoc input validation error vulnerability

showdoc is an open source tool ideal for IT teams to share documents online. showDoc is vulnerable to an input validation error, which can be exploited by attackers to perform URL redirection attacks...

showdoc security feature issue vulnerability

showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3989

showdoc is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3990

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

CVE-2021-3989

showdoc is vulnerable to URL Redirection to Untrusted Site...

Design/Logic Flaw

showdoc is vulnerable to URL Redirection to Untrusted Site...

Code injection

showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3989

CVE-2021-3989 concerns showdoc and is described across multiple sources as an Open Redirect (URL Redirection to Untrusted Site). The CVE entry ties the vulnerability to the showdoc project by star7th and is listed in CVE records as an Open Redirect vulnerability. Connected documents corroborate t...