GHSA-fm5r-cj7v-rj2c CVE-2026-6982
ShowDoc has an Injection vulnerability
- Severity
- 0.0 / 10
- Medium · CVSS 4.0
- Exploit chance (EPSS)
- 0.24%
- Chance of exploitation in the next 30 days. Higher than 15.27% of scored vulnerabilities.
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
- Fix
3.8.1- Upgrade showdoc/showdoc to this version or later
Description
A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."
Affected versions
Packagist
| Package | Vulnerable | Fixed in |
|---|---|---|
| showdoc/showdoc | < 3.8.1 |
3.8.1 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
showdoc/showdoc Packagist → 3.8.1
- composer
composer require showdoc/showdoc:^3.8.1
Severity breakdown
CVSS 4.0 0.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
- Attack vector
- Network
- Attack complexity
- Low
- Attack requirements
- None
- Privileges required
- Low
- User interaction
- None
- Confidentiality (vulnerable system)
- Low
- Integrity (vulnerable system)
- Low
- Availability (vulnerable system)
- Low
- Confidentiality (subsequent systems)
- None
- Integrity (subsequent systems)
- None
- Availability (subsequent systems)
- None
CVSS 3.1 6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Weakness
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
How to prevent it
- Requirements: Programming languages and supporting technologies might be chosen which are not subject to these issues.
- Implementation: Utilize an appropriate mix of allowlist and denylist parsing to filter control-plane syntax from all input.
References
Advisories
Packages
Other links
Timeline
- Published
- Last updated by the source
- Latest EPSS score
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-6jmr-r7p6-f5wr ShowDoc unrestricted file upload vulnerability | Critical | Also affects showdoc/showdoc |
| GHSA-2263-jwgm-wv97 Showdoc XSS Vulnerability | Medium | Also affects showdoc/showdoc |
| GHSA-6xx7-cphv-pxgr Showdoc Forced Browsing | Medium | Also affects showdoc/showdoc |
| GHSA-3p87-gqw8-4pf2 Showdoc CSRF Vulnerability | Medium | Also affects showdoc/showdoc |
| GHSA-pfrc-5hhq-6hvr Showdoc Unauthenticated Access | Medium | Also affects showdoc/showdoc |
| GHSA-xp82-jmw8-mjxp Unrestricted Upload of File with Dangerous Type in ShowDoc | High | Also affects showdoc/showdoc |
| GHSA-vpwq-6cp4-ffqc Stored Cross-site Scripting in ShowDoc | Medium | Also affects showdoc/showdoc |
| GHSA-v94v-pxqp-5qgj Cross-site Scripting in ShowDoc | Medium | Also affects showdoc/showdoc |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor