Skip to main content

Document On Line Submission And Approval System

2 CVEs product

Monthly

CVE-2023-37290 HIGH This Week

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Authentication Bypass Document On Line Submission And Approval System
NVD
CVSS 3.1
7.5
EPSS
0.6%
CVE-2023-37289 CRITICAL Act Now

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

File Upload Document On Line Submission And Approval System
NVD
CVSS 3.1
9.8
EPSS
0.7%
EPSS 1% CVSS 7.5
HIGH This Week

InfoDoc Document On-line Submission and Approval System lacks sufficient restrictions on the available tags within its HTML to PDF conversion function, and allowing an unauthenticated attackers to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Authentication Bypass Document On Line Submission And Approval System
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

It is identified a vulnerability of Unrestricted Upload of File with Dangerous Type in the file uploading function in InfoDoc Document On-line Submission and Approval System, which allows an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

File Upload Document On Line Submission And Approval System
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy