~ / search / GHSA-3p87-gqw8-4pf2

GHSA-3p87-gqw8-4pf2

Showdoc CSRF Vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-19621

Packages

EcosystemPackageAffectedFixed in
Packagist showdoc/showdoc <= 2.4.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

`server/index.php?s=/api/teamMember/save` in ShowDoc 2.4.2 has a CSRF that can add members to a team.

References

External links from the advisory. They lead to third-party sites.