{"id":"CVE-2021-41745","aliases":["GHSA-4286-h47h-m5v6"],"url":"https://o3.security/vulnerability/CVE-2021-41745","summary":"Showdoc File Upload Vulnerability","details":"ShowDoc 2.8.3 ihas a file upload vulnerability, where attackers can use the vulnerability to obtain server permissions.","published":"2021-10-22T12:15:09.107Z","modified":"2026-08-07T17:02:59.290043Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.0139,"percentile":0.69823,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"showdoc/showdoc","fixedVersion":"2.8.5"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/purple-WL/SHOWDOC-file-upload-vulnerability"},{"type":"ADVISORY","url":"https://www.cnvd.org.cn/flaw/show/CNVD-2020-49480"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-07T17:02:59.290043Z"}}