CVE-2022-1034: Unrestricted Upload of File with Dangerous Type

March 22, 2022 (updated March 28, 2022)

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.

References

github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b
huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7
nvd.nist.gov/vuln/detail/CVE-2022-1034

Code Behaviors & Features

Detect and mitigate CVE-2022-1034 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →