CVE-2021-4000

showdoc is vulnerable to URL Redirection to Untrusted Site

• CWE-601

• https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138Patch, Third Party Advisory
• https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962Exploit, Third Party Advisory
• https://github.com/star7th/showdoc/commit/c7f10033eba5f2b5a537f9af9ba2379138e67138Patch, Third Party Advisory
• https://huntr.dev/bounties/e4d803e0-3104-432c-80b3-34bc453c8962Exploit, Third Party Advisory

Published

Dec 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39994There is an arbitrary address access vulnerability with the …9.8
• CVE-2021-39995Some Huawei products use the OpenHpi software for hardware m…6.5
• CVE-2021-39996There is a Heap-based buffer overflow vulnerability with the…9.8
• CVE-2021-39997There is a vulnerability of unstrict input parameter verific…9.8
• CVE-2021-39998There is Vulnerability of APIs being concurrently called for…7.5
• CVE-2021-39999There is a buffer overflow vulnerability in eSE620X vESS V10…7.5
• CVE-2021-40000The Bluetooth module has an out-of-bounds write vulnerabilit…8.8
• CVE-2021-40001The CaasKit module has a path traversal vulnerability. Succe…5.3
• CVE-2021-40002The Bluetooth module has an out-of-bounds write vulnerabilit…8.8
• CVE-2021-40003HwPCAssistant has a path traversal vulnerability. Successful…5.3
• CVE-2021-40004The cellular module has a vulnerability in permission manage…7.5
• CVE-2021-40005The distributed data service component has a vulnerability i…7.5