Skip to content
OpenAdvisories

Vendor

iDocView

1 known vulnerabilities.

Products

iDocView 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-54402

    iDocView SSRF via /doc/upload Endpoint Hardcoded Token

    iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to bypass authentication. Attackers can exp…

    iDocView iDocView