showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

GHSA ID

GHSA-f77h-m9w2-vvg2

CVE ID

CVE-2021-4017

Severity

high

Published

2021-12-03T20:38:57Z

Updated

2023-02-01T05:06:45Z

CVSS

8.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3

8.8 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

CWEs

• CWE-352 · Cross-Site Request Forgery (CSRF)

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-4017 ↗
• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871 ↗
• https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcd ↗
• https://github.com/advisories/GHSA-f77h-m9w2-vvg2 ↗