CVE-2018-19621

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-11-28

Last modified

2024-09-17

Weaknesses

CWE-352

Affected products

• Showdoc (Showdoc)

References

• https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/csrf