{"id":"CVE-2018-19620","aliases":["GHSA-pfrc-5hhq-6hvr"],"url":"https://o3.security/vulnerability/CVE-2018-19620","summary":"Showdoc Unauthenticated Access","details":"ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.","published":"2018-11-28T08:29:00.277Z","modified":"2026-08-07T14:58:50.436671Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"epss":{"score":0.0126,"percentile":0.68175,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"Packagist","name":"showdoc/showdoc","fixedVersion":"2.4.2"}],"fix":{"url":"https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c","label":"star7th/showdoc@bcdb5e3"},"references":[{"type":"REPORT","url":"https://github.com/star7th/showdoc/issues/397"},{"type":"FIX","url":"https://github.com/star7th/showdoc/commit/bcdb5e3519285bdf81e618b3c9b90d22bc49e13c"},{"type":"EVIDENCE","url":"https://github.com/CCCCCrash/POCs/tree/master/Web/showdoc/IncorrectAccessControl#0x02-modify"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T14:58:50.436671Z"}}