CVE-2026-119661: falha de baixa gravidade em star7th ShowDoc
ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.3epss 0.4%
ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint that checks edit permission only for the first supplied entry id. Authenticated attackers can place their own entry id first and append other users' entry ids to permanently delete those parameter-description entries.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
star7th · ShowDocCVEs relacionadas — star7th ShowDoc
No mesmo produto, das mais perigosas para as menos.
Referências
https://github.com/star7th/showdochttps://github.com/star7th/showdoc/blob/v3.9.5/server/app/Api/Controller/ParamDescLibController.php#L545-L584https://github.com/star7th/showdoc/commit/53228511e656904abf7841c3d25ff78a4b5ce9c2https://github.com/star7th/showdoc/issues/2612https://hackmd.io/@hieuPenguinnn/showdoc-paramdesclib-cross-item-idor-deletehttps://www.vulncheck.com/advisories/showdoc-through-3.9.5-authorization-bypass-via-paramdesclib-deleteentries