Vulnerability · Published Apr 29, 2025 · Assigned by VulnCheck
CVE-2025-0520ShowDoc < 2.8.7 Unauthenticated File Upload Remote Code Execution
Critical 9.4
In plain English
A critical-severity unrestricted file upload in ShowDoc from ShowDoc. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei. Fixed versions are available - upgrade the affected package.
Severity (CVSS 4.0)9.4Critical
Exploit odds (30 days)2.4%top 15.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Nuclei
Official description
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | showdoc/showdoc | 2.8.7 | GHSA-6jmr-r7p6-f5wr |
Affected products (as reported)
Weakness: CWE-434 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
References
- https://github.com/vulhub/vulhub/tree/master/showdoc/CNVD-2020-26585 exploit
- https://github.com/star7th/showdoc/pull/1059 issue-tracking
- https://www.cnvd.org.cn/flaw/show/CNVD-2020-26585 third-party-advisory
- https://www.vulncheck.com/advisories/showdoc-unauthenticated-file-upload-rce third-party-advisory