Description
There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7
Patch, Third Party Advisory x_refsource_misc
https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b
Scores
CVSS v3
7.2
EPSS
0.0049
EPSS Percentile
65.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-434
Status
published
Products (2)
showdoc/showdoc
< 2.10.4
showdoc/showdoc
0 - 2.10.4Packagist
Published
Mar 22, 2022
Tracked Since
Feb 18, 2026