What is GHSA-pfrc-5hhq-6hvr?

GHSA-pfrc-5hhq-6hvr is a security advisory published by GitHub Security Advisories with Medium severity. Showdoc Unauthenticated Access

Which CVE IDs does GHSA-pfrc-5hhq-6hvr cover?

GHSA-pfrc-5hhq-6hvr covers the following CVE IDs: CVE-2018-19620. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pfrc-5hhq-6hvr?

GHSA-pfrc-5hhq-6hvr has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-pfrc-5hhq-6hvr?

GHSA-pfrc-5hhq-6hvr affects 1 product, including: composer/showdoc/showdoc:\u003c 2.4.2.

GHSA-pfrc-5hhq-6hvrMediumCVSS 4.3

Showdoc Unauthenticated Access

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

May 6, 2025

🔗 CVE IDs covered (1)

CVE-2018-19620 →

📋 Description

ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.

🎯 Affected products1

composer/showdoc/showdoc:< 2.4.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2018-19620
https://github.com/star7th/showdoc/issues/397
https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c
https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify
https://github.com/star7th/showdoc/commits/v2.4.2
https://github.com/advisories/GHSA-pfrc-5hhq-6hvr