showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Open Redirect in star7th/showdoc

Description Open Redirect at login page due to unchecked "redirect" parameter. Vulnerable parameter redirect Payload /%09/google.com Proof of Concept Send users the following login link https://www.showdoc.com.cn/user/login?redirect=/%09/google.com After users use their registered account to logi...

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The vulnerability exists through the register function in UserController.class.php, allowing an attacker to add any member to the team...

Cross-site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. The server is unable to verify the authenticity of web requests due to a lack of anti-CSRF protection mechanism in the REST API, allowing an attacker to add any member for any item if users visit the attacker site...

Cross-Site Request Forgery (CSRF)

showdoc/showdoc is vulnerable to cross-site request forgery. An attacker can add arbitrary members to the team through the register function in UserController.class.php...

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3775

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

Cross site request forgery (csrf)

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3683

CVE-2021-3683 affects the ShowDoc project and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Multiple connected sources confirm a CSRF issue in ShowDoc and cite the root cause as inadequate cookie handling/filtering in the software (notably in UserController.class.php), enabli...

CVE-2021-3775

ShowDoc is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2021-3775). Technical notes across CNVD indicate the issue stems from inadequate filtering/restriction of cookies in UserController.class.php, enabling CSRF exploitation. The vulnerability is documented across multiple ...

CVE-2021-3775 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776 Cross-Site Request Forgery (CSRF) in star7th/showdoc

showdoc is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3776

CVE-2021-3776 corresponds to a CSRF vulnerability in the open-source tool ShowDoc. Multiple connected sources (CNVD-2021-89160, RH/CVE-2021-3776, OSV, CNVD/CNNVD, CVE listings) corroborate that ShowDoc is vulnerable to CSRF, stemming from insufficient filtering/restriction of cookies in the softw...

showdoc 跨站请求伪造漏洞

ShowDoc is an open source tool for IT teams to share documents online. ShowDoc is vulnerable to cross-site request forgery, which stems from the lack of effective filtering and restriction of cookies set in the software's UserController.class.php, and can be exploited by attackers to cause...