Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS02cHFtLXh2ZmMtdzdwNM0Yzg

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

showdoc is vulnerable to Cross-Site Request Forgery (CSRF).

Permalink: https://github.com/advisories/GHSA-6pqm-xvfc-w7p4
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02cHFtLXh2ZmMtdzdwNM0Yzg
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 8 months ago

CVSS Score: 6.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Identifiers: GHSA-6pqm-xvfc-w7p4, CVE-2021-3993
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-3993
• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871
• https://huntr.dev/bounties/0aa84736-139b-4ae7-becf-604f7f60b1c9
• https://github.com/advisories/GHSA-6pqm-xvfc-w7p4

Affected Packages