Login Request a demo
PW
Product
pwndoc
by pwndoc · last CVE Feb 28, 2025
6
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pwndoc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-55602
8.5
1%
Dec 10
PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal
Affected: < 1d4219c596f4f518798492e48386a20c6e9a2fe6
CVE-2025-23044
8.1
0%
Jan 20
Cross-Site Request Forgery (CSRF) allows creating admin account with POST request
Affected: < 14acb704891245bf1703ce6296d62112e85aa995
CVE-2025-27410
6.5
2%
Feb 28
PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin
Affected: < 1.2.0
CVE-2024-55652
6.5
1%
Dec 11
PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters
Affected: < 1d4219c596f4f518798492e48386a20c6e9a2fe6
CVE-2024-55653
6.5
1%
Dec 10
pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)
Affected: <= 0.5.3
CVE-2025-27413
4.9
1%
Feb 28
PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json
Affected: < 1.2.0
Showing 6