Skip to content
OpenAdvisories

Vendor

ShowDoc

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates

    ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mo…