TI-2023-30651 CVE-2023-54402 · GHSA-2xg3-76qw-g9mm
iDocView SSRF via /doc/upload Endpoint Hardcoded Token
Priority HIGH 77
iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to b…