Threats tagged 'ghsa-6jmr-r7p6-f5wr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.4	EPSS 2.4%	CVE-2025-0520showdoc/showdoc · ShowDoc unrestricted file upload vulnerability Critical9.4EPSS 2.4%2025-04-29GCVE DatabaseCVE-2025-0520 ShowDoc versions prior to 2.8.7 contain an unrestricted file upload vulnerability due to improper validation of file extensions. This flaw allows attackers to upload and execute arbitrary PHP code, resulting in remote code execution. The vulnerability is classified as critical with a CVSS 4.0 score of 9.4. A fix is available in ShowDoc version 2.8.7. EPSS 2.4%Vulnerability CWE-434 #ghsa-6jmr-r7p6-f5wr #packagist	GCVE Database	2025-04-29

Page 1 of 1