CVE-2018-19621

Publication date

2018-11-28 08:00:00

Family

mitre

State

PUBLISHED

Description

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.