{"id":"CVE-2021-41745","aliases":["GHSA-4286-h47h-m5v6"],"url":"https://o3.security/vulnerability/CVE-2021-41745","summary":"Showdoc File Upload Vulnerability","details":"A file upload vulnerability exists in Showdoc 2.8.3, which can be exploited by an attacker to gain server privileges.","published":"2021-10-22T12:15:09.107Z","modified":"2026-08-07T17:02:59.290043Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.0139,"percentile":0.69823,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"showdoc/showdoc","fixedVersion":"2.8.5"}],"fix":{"url":"https://github.com/star7th/showdoc/commit/aec3df841958059c1db9ab1af25acc2af81e4e0e","label":"star7th/showdoc@aec3df8"},"references":[{"type":"ADVISORY","url":"https://github.com/purple-WL/SHOWDOC-file-upload-vulnerability"},{"type":"ADVISORY","url":"https://www.cnvd.org.cn/flaw/show/CNVD-2020-49480"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-41745"},{"type":"WEB","url":"https://github.com/star7th/showdoc/commit/aec3df841958059c1db9ab1af25acc2af81e4e0e"},{"type":"PACKAGE","url":"https://github.com/star7th/showdoc"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T17:02:59.290043Z"}}