Read the docs

InfoDoc

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

InfoDoc records in CISA KEV

No InfoDoc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Document On-line Submission And Approval System 2 records MEDIUM

Records

2 records

TI-2023-18919 CVE-2023-37289 · GHSA-73xh-4mx2-qvpf

InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

Priority MEDIUM 51

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attack…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-20 No fix listed CWE-434
TI-2023-18920 CVE-2023-37290 · GHSA-cjw6-fcr4-7qrh

InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)

Priority MEDIUM 40

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local re…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2023-07-20 No fix listed CWE-918
Open these records in search →