medium6.5
CVE-2018-19621
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Impact
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Showdoc | Showdoc | Version 2.4.2 |