CVE-2021-3993

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352
• CWE-352

• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871Patch, Third Party Advisory
• https://huntr.dev/bounties/0aa84736-139b-4ae7-becf-604f7f60b1c9Exploit, Patch, Third Party Advisory
• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871Patch, Third Party Advisory
• https://huntr.dev/bounties/0aa84736-139b-4ae7-becf-604f7f60b1c9Exploit, Patch, Third Party Advisory

Published

Dec 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39924Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0…7.5
• CVE-2021-39925Buffer overflow in the Bluetooth SDP dissector in Wireshark …7.5
• CVE-2021-39926Buffer overflow in the Bluetooth HCI_ISO dissector in Wiresh…7.5
• CVE-2021-39927Server side request forgery protections in GitLab CE/EE vers…4.3
• CVE-2021-39928NULL pointer exception in the IEEE 802.11 dissector in Wires…7.5
• CVE-2021-39929Uncontrolled Recursion in the Bluetooth DHT dissector in Wir…7.5
• CVE-2021-39930Missing authorization in GitLab EE versions between 12.4 and…4.3
• CVE-2021-39931An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2021-39932An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2021-39933An issue has been discovered in GitLab CE/EE affecting all v…6.5
• CVE-2021-39934Improper access control allows any project member to retriev…4.3
• CVE-2021-39935An issue has been discovered in GitLab CE/EE affecting all v…7.5