Skip to content
OpenAdvisories

Vendor

pwndoc

6 known vulnerabilities.

Products

pwndoc 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2024-55602

    PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal

    PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and download templates can inject path traversal (`../`) sequences into the file extension property to read ar…

    pwndoc pwndoc