CVE-2018-19621
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Published: 2018-11-28 · CVSS: Unscored
server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7