Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: InfoDoc Clear all filters
TI-2023-18920 CVE-2023-37290 · GHSA-cjw6-fcr4-7qrh

InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)

Priority MEDIUM 40

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local re…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2023-07-20 No fix listed CWE-918
TI-2023-18919 CVE-2023-37289 · GHSA-73xh-4mx2-qvpf

InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload

Priority MEDIUM 51

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attack…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00928 Published 2023-07-20 No fix listed CWE-434