Paper/Archive/CVE-2022-1034

CVE-2022-1034

star7th star7th/showdoc — There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc

EPSS 1%CVSS 9.1

critical.is priorityof 100

42

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 73.9.739 × 2014.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.

Affected

ProductAffectedFixed inSource

star7th/showdocunspecified – < 2.10.42.10.4CNA

Scores by source

@huntrdev (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

refhuntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7 refgithub.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b