Vulnerability · Published Sep 30, 2026 · Assigned by VulnCheck

CVE-2023-54402iDocView SSRF via /doc/upload Endpoint Hardcoded Token

High 7.5

In plain English

A high-severity server-side request forgery in iDocView from iDocView. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.4%top 60.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to bypass authentication. Attackers can exploit the unrestricted URL scheme handling, including file:// URIs, to read arbitrary local files such as operating-system and application configuration files, and to reach internal network hosts and services not otherwise accessible. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-26.

Affected products (as reported)

Vendor	Product	Versions
iDocView	iDocView	*

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Nuclei Template technical-description
CDSN Blog exploit
https://www.vulncheck.com/advisories/idocview-ssrf-via-doc-upload-endpoint-hardcoded-token third-party-advisory