Skip to content
OpenAdvisories

Archive

28 November 2018

Vulnerabilities first published on this day (UTC), newest first.

42 results · Feed

  • Medium 6.5

    Showdoc CSRF Vulnerability

    server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

  • Medium 4.3

    Showdoc Unauthenticated Access

    ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.