Vulnerability · Published Dec 3, 2021 · Assigned by @huntrdev

CVE-2021-4000Open Redirect in star7th/showdoc

Medium 6.5

In plain English

A medium-severity open redirect in star7th/showdoc from star7th. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).

Severity (CVSS 3.0)6.5Medium

Exploit odds (30 days)0.8%top 41.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

showdoc is vulnerable to URL Redirection to Untrusted Site

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	showdoc/showdoc	no fix listed	GHSA-8c9x-wfgj-v78w

Affected products (as reported)

Vendor	Product	Versions
star7th	star7th/showdoc	unspecified – before 2.9.13

Weakness: CWE-601 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References

https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962 x_refsource_CONFIRM
https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138 x_refsource_MISC