Description
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | showdoc/showdoc | <= 2.4.2 | — | GHSA-3p87-gqw8-4pf2 |
Medium · 6.5
CVE-2018-19621
EUVD-2022-2221GHSA-3p87-gqw8-4pf2
Showdoc CSRF Vulnerability
Published Nov 28, 2018 · Updated Sep 17, 2024 · Assigned by mitre