CVE-2021-3776

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352

• https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351Patch, Third Party Advisory
• https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304Exploit, Patch, Third Party Advisory
• https://github.com/star7th/showdoc/commit/67093c879a6563aa6ee08003177777d1975e2351Patch, Third Party Advisory
• https://huntr.dev/bounties/e0edf27d-437e-44fe-907a-df020f385304Exploit, Patch, Third Party Advisory

Published

Nov 13, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37746textview_uri_security_check in textview.c in Claws Mail befo…6.1
• CVE-2021-37748Multiple buffer overflows in the limited configuration shell…8.8
• CVE-2021-37749MapService.svc in Hexagon GeoMedia WebMap 2020 before Update…9.8
• CVE-2021-3775showdoc is vulnerable to Cross-Site Request Forgery (CSRF)5.4
• CVE-2021-37750The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb…6.5
• CVE-2021-37759A Session ID leak in the DEBUG log file in Graylog before 4.…9.8
• CVE-2021-37760A Session ID leak in the audit log in Graylog before 4.1.2 a…9.8
• CVE-2021-37761Zoho ManageEngine ADManager Plus version 7110 and prior is v…9.8
• CVE-2021-37762Zoho ManageEngine ADManager Plus version 7110 and prior allo…9.8
• CVE-2021-37764Arbitrary File Deletion vulnerability in XOS-Shop xos_shop_s…8.1
• CVE-2021-3777nodejs-tmpl is vulnerable to Inefficient Regular Expression …7.5
• CVE-2021-37770Nucleus CMS v3.71 is affected by a file upload vulnerability…7.2