CVE Feed

    Dashboard / CVE / CVE-2022-1034

    CVE-2022-1034

    There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.

    Published:Mar 22, 2022
    Last Modified:Nov 21, 2024
    EPS:Mar 22, 2022
    EPSS Score:0.0047
    CVSS Score:7.2

    Affected Products

    Vendor
    Showdoc
    Product
    Showdoc

    Exploits

    https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2026-86644 (CVSS 2) — A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the …
    CVE-2026-6982 (CVSS 5.3) — A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is…
    CVE-2025-0520 (CVSS 9.4) — An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows ex…
    CVE-2022-0964 (CVSS 5.4) — Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.…
    CVE-2022-0965 (CVSS 5.4) — Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.…
    CVE-2022-0966 (CVSS 5.4) — Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.…
    CVE-2022-0967 (CVSS 5.4) — Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to…
    CVE-2022-0942 (CVSS 5.4) — Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.…
    CVE-2022-0957 (CVSS 5.4) — Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.…
    CVE-2022-0956 (CVSS 5.4) — Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High