PW
Product
Pwndoc
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 5Low 0
Watch
Add Pwndoc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45771 | 8.8 | Dec 5 | An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file Affected: 0.5.3 |
| CVE-2021-31590 | 8.8 | Jul 19 | PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control Affected: before 0.4.0 |
| CVE-2024-55602 | 8.5 | Dec 10 | PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal Affected: through 1.2.1 |
| CVE-2025-23044 | 8.1 | Jan 20 | Cross-Site Request Forgery (CSRF) allows creating admin account with POST request Affected: before 0.9.0 |
Showing 4
