CVE-2022-0965criticalCWE-79

CVE-2022-0965: falha crítica em star7th/showdoc

Stored XSS viva .ofd file upload in star7th/showdoc

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar star7th/showdoc+ Monitorar showdoc/showdoc

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9epss 0.9%
Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
star7th · star7th/showdoc
CVEs relacionadas — star7th/showdoc

No mesmo produto, das mais perigosas para as menos.

CVE-2022-0967MEDIUMStored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdocEPSS 3.3%CVE-2022-1034CRITICALThere is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdocEPSS 1.5%CVE-2022-0362MEDIUMSQL Injection in star7th/showdocEPSS 1.5%CVE-2021-3678HIGHUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdocEPSS 1.1%CVE-2022-0079MEDIUMGeneration of Error Message Containing Sensitive Information in star7th/showdocEPSS 1.0%CVE-2022-0409HIGHUnrestricted Upload of File with Dangerous Type in star7th/showdocEPSS 0.9%