Skip to content
OpenAdvisories
High · 8.2 CVE-2022-0951 EUVD-2022-1451GHSA-j6jg-w79c-7p8v

File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc

Published Mar 15, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: star7th Product: star7th/showdoc Package: showdoc/showdoc Ecosystem: Packagist

Description

File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.

Affected products

VendorProductAffectedFixed
star7th star7th/showdoc unspecified – < 2.10.4 2.10.4

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist showdoc/showdoc < 2.10.4 2.10.4 GHSA-j6jg-w79c-7p8v

References