InfoDoc vulnerabilities
We track 2 vulnerabilities in InfoDoc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2023.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest InfoDoc vulnerabilities
- 7.5 High severity
Document On-line Submission and Approval System: Server-Side Request Forgery
InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to load remote or local resources through HTML tags such as iframe
- 9.8 Critical severity
Document On-line Submission and Approval System: Unrestricted Upload of File with Dangerous Type
It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an unauthenticated remote attacker can exploit this vulnerability withou