Priority LOW 35
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01481 · Published 2022-03-22 · Fixed in 2.10.4 CWE-434
Priority LOW 26
Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00838 · Published 2022-03-15 · Fixed in 2.10.4 CWE-79
Priority LOW 26
Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00902 · Published 2022-03-15 · Fixed in 2.10.4 CWE-79
Priority LOW 25
Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00541 · Published 2022-03-15 · Fixed in 2.4.10, 2.10.4 CWE-79
Priority LOW 30
Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.03262 · Published 2022-03-15 · Fixed in 2.10.4 CWE-79
Priority LOW 26
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00752 · Published 2022-03-15 · Fixed in 2.10.4 CWE-79
Priority LOW 26
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00766 · Published 2022-03-15 · Fixed in 2.10.4 CWE-79
Priority LOW 26
Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00736 · Published 2022-03-15 · Fixed in v.2.10.4, 2.10.4 CWE-79
Priority LOW 29
File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00884 · Published 2022-03-15 · Fixed in 2.10.4 CWE-434
Priority LOW 25
Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00634 · Published 2022-03-15 · Fixed in 2.10.4 CWE-434
Priority LOW 26
Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00809 · Published 2022-03-15 · Fixed in v2.10.4, 2.10.4 CWE-434
Priority LOW 26
Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00902 · Published 2022-03-14 · Fixed in 2.10.4 CWE-434
Priority LOW 26
Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00853 · Published 2022-03-14 · Fixed in 2.10.4 CWE-434
Priority LOW 26
Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00819 · Published 2022-03-14 · Fixed in v2.10.4, 2.10.4 CWE-79
Priority LOW 25
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00619 · Published 2022-03-14 · Fixed in v2.10.4, 2.10.4 CWE-79
Priority LOW 25
Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00547 · Published 2022-03-14 · Fixed in v2.10.4, 2.10.4 CWE-79
Priority LOW 25
Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00641 · Published 2022-03-14 · Fixed in v2.10.4, 2.10.4 CWE-79
Priority LOW 25
Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00547 · Published 2022-03-14 · Fixed in 2.10.4 CWE-79
Priority LOW 26
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00743 · Published 2022-03-12 · Fixed in 2.10.2, 2.10.4 CWE-79
Priority LOW 36
Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00942 · Published 2022-02-19 · Fixed in 2.10.2 CWE-434
Priority MEDIUM 45
SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01467 · Published 2022-01-26 · Fixed in 2.10.3 CWE-89
Priority LOW 25
Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00642 · Published 2022-01-22 · Fixed in 2.10.2 CWE-79
Priority LOW 26
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01001 · Published 2022-01-03 · Fixed in 2.10.0 CWE-209
Priority LOW 39
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00634 · Published 2021-12-26 · Fixed in 2.9.15 CWE-352
Priority LOW 29
showdoc is vulnerable to URL Redirection to Untrusted Site
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00849 · Published 2021-12-03 · Fixed in 2.9.13 CWE-601
Load more
THREATIST.IORead the docs