CVE-2021-3680
1 advisory.
Packagist/showdoc/showdoc CVE-2021-3680: medium 4.9, EPSS 0.46%
Inadequate Encryption Strength in showdoc
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-8vh3-29mr-m9xg
- https://nvd.nist.gov/vuln/detail/CVE-2021-3680
- https://github.com/star7th/showdoc/commit/4b962c1740311e0d46775023b6acba39ad60e370
- https://github.com/star7th/showdoc
- https://github.com/star7th/showdoc/blob/fd1740234a12804b45af9cac3563567d83ba414d/server/Application/Home/Model/UserModel.class.php#L20
- https://huntr.dev/bounties/76b49607-fba9-4100-9be7-cb459fe6cfe2
CVE-2021-3680 · published · modified · JSON