461 matches found
CVE-2021-3989 Open Redirect in star7th/showdoc
showdoc is vulnerable to URL Redirection to Untrusted Site...
CVE-2021-3990 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc
showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG...
CVE-2021-3990
Technical details (affected versions, root cause specifics, and fixes) for CVE-2021-3990 are not publicly available in the provided connected documents. Monitor for updates from vendors and vulnerability databases.
CVE-2021-3993
CVE-2021-3993 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the open-source web tool showdoc (notably in the star7th/showdoc project). The connected advisories describe CSRF as the underlying issue enabling attackers to forge state-changing requests. Some sources provide PoCs and...
CVE-2021-3993 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4017 Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4017
CVE-2021-4017 affects the open‑source documentation tool showdoc . The connected documents confirm a Cross‑Site Request Forgery (CSRF) vulnerability enabling unauthorized state‑changing requests via the authenticated user’s browser; CNVD notes an exploit path: "/server/index.php?s=/api/itemGroup/...
showdoc 输入验证错误漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showDoc is vulnerable to an input validation error, which can be exploited by attackers to perform URL redirection attacks...
showdoc 跨站请求伪造漏洞
showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...
showdoc 跨站请求伪造漏洞
showdoc is an open source tool ideal for IT teams to share documents online. showDoc has a security vulnerability that can be exploited by attackers to perform request forgery CSRF attacks...
showdoc 安全特征问题漏洞
showdoc is open source and a great tool for IT teams to share documents online. showDoc is vulnerable to a security feature issue that stems from the use of an encrypted weak pseudo-random number generator PRNG. No detailed vulnerability details are currently available...
Cross-Site Request Forgery (CSRF) in star7th/showdoc
Description An attacker is able to create a new group for any item if users visit the attacker's website. Furthermore, the user-id "uid" is also exposed via the JSON response. We can bypass the CSRF Protection if we put our payload on an iframe or an HTML file and then send them to the victim...
ShowDoc Cross-Site Request Forgery Vulnerability (CNVD-2021-89159)
ShowDoc is an open source tool for IT teams to share documents online.ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, which can be exploited by attackers to cause a...
ShowDoc Cross-Site Request Forgery Vulnerability
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
ShowDoc Cross-Site Request Forgery Vulnerability
ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...
GHSA-PJJF-HC4Q-G298 showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-X5JP-9FMM-M9PF showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
showdoc is vulnerable to Cross-Site Request Forgery CSRF...