471 matches found
CVE-2021-4000
showdoc is vulnerable to URL Redirection to Untrusted Site...
Design/Logic Flaw
showdoc is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-4000 Open Redirect in star7th/showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-4000
CVE-2021-4000 corresponds to an open redirect vulnerability in the ShowDoc project. Multiple sources in the connected set identify this as a URL Redirection to Untrusted Site issue affecting ShowDoc (e.g., GHSA-8C9X-WFGJ-V78W and related CVE records). The available data confirms the vulnerability...
Cross-Site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery attacks. The vulnerability exists in index.php due to an insufficient permissions check which allows a malicious attacker to perform unauthenticated actions...
showdoc 输入验证错误漏洞
ShowDoc is open source a great tool for IT teams to share documents online. ShowDoc suffers from an input validation error vulnerability that stems from showdoc's susceptibility to URL redirection to untrusted sites. No detailed vulnerability details are provided at this time...
Cross-site Request Forgery (CSRF)
showdoc/showdoc is vulnerable to cross-site request forgery. The library does not verify the authenticity of requests due to a lack of anti-CSRF protection, allowing an attacker to create a new group for any item if users visit the attacker site...
showdoc input validation error vulnerability
showdoc is an open source tool ideal for IT teams to share documents online. showDoc is vulnerable to an input validation error, which can be exploited by attackers to perform URL redirection attacks...
showdoc security feature issue vulnerability
showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...
showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94820)
showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...
showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94821)
showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...
CVE-2021-4017
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4017
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3993
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3993
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3993
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4017
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-3990
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...