GitHub Advisoryadvisory · Packagist

GHSA-3p87-gqw8-4pf2 Showdoc CSRF Vulnerability

MEDIUM Published 2022-05-14 Modified 2023-10-06 Official page ↗

Aliases: CVE-2018-19621
Ecosystem: Packagist
Packages: showdoc/showdoc
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses: CWE-352
Reviewed: 2023-07-24

Affected packages

• Packagist showdoc/showdoc: <= 2.4.2 (no fix yet)

Description

`server/index.php?s=/api/teamMember/save` in ShowDoc 2.4.2 has a CSRF that can add members to a team.

Related

Alias · CVE (1)

CVE-2018-19621 server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team. vulnerability

Weakness · CWE (1)

CWE-352 Cross-Site Request Forgery weakness

References