PW
Product
Pwndoc
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Pwndoc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45771 | 8.8 | Dec 5 | An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file Affected: 0.5.3 |
| CVE-2021-31590 | 8.8 | Jul 19 | PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control Affected: before 0.4.0 |
| CVE-2024-55602 | 8.5 | Dec 10 | PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal Affected: through 1.2.1 |
| CVE-2025-23044 | 8.1 | Jan 20 | Cross-Site Request Forgery (CSRF) allows creating admin account with POST request Affected: before 0.9.0 |
| CVE-2025-27410 | 6.5 | Feb 28 | PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin Affected: before 1.2.0 |
| CVE-2024-55653 | 6.5 | Dec 10 | pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) Affected: before 0.9.0 |
| CVE-2022-44023 | 5.3 | Oct 29 | PwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by leveraging response messages for authentication attempts Affected: through 0.5.3 |
| CVE-2022-44022 | 5.3 | Oct 29 | PwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by leveraging response timings for authentication attempts Affected: through 0.5.3 |
| CVE-2025-27413 | 4.9 | Feb 28 | PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json Affected: before 1.2.0 |
Showing 9