CVE-2022-0951
1 advisory.
Packagist/showdoc/showdoc CVE-2022-0951: medium 6.1, EPSS 0.88%
File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc
Action: Upgrade showdoc/showdoc to 2.10.4 or later.
composer require showdoc/showdoc:2.10.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.4 | - |
Fixed versions
| 2.10.4 |
Sources
- osv: GHSA-j6jg-w79c-7p8v
- https://nvd.nist.gov/vuln/detail/CVE-2022-0951
- https://github.com/star7th/showdoc/commit/237ac6d43bf3728bf3587c486a23b4a48ea7acb3
- https://github.com/star7th/showdoc
- https://huntr.dev/bounties/b3a983a3-17f9-4aa8-92d7-8a0c92a93932
CVE-2022-0951 · published · modified · JSON