CVE-2021-4017

showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

• CWE-352

• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871Patch, Third Party Advisory
• https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcdExploit, Patch, Third Party Advisory
• https://github.com/star7th/showdoc/commit/654e871a3923e79076818a9a03533fe88222c871Patch, Third Party Advisory
• https://huntr.dev/bounties/1d8439e8-b3f7-40f8-8b30-f9cb05ff2bcdExploit, Patch, Third Party Advisory

Published

Dec 1, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40162A maliciously crafted TIF, PICT, TGA, or RLC files in Autode…7.8
• CVE-2021-40163A Memory Corruption vulnerability may lead to code execution…7.8
• CVE-2021-40164A heap-based buffer overflow could occur while parsing TIFF,…7.8
• CVE-2021-40165A maliciously crafted TIFF, PICT, TGA, or RLC file in Autode…7.8
• CVE-2021-40166A maliciously crafted PNG file in Autodesk Image Processing …7.8
• CVE-2021-40167A malicious crafted dwf or .pct file when consumed through D…7.8
• CVE-2021-40170An RF replay attack vulnerability in the SecuritasHome home …6.8
• CVE-2021-40171The absence of notifications regarding an ongoing RF jamming…5.3
• CVE-2021-40172Zoho ManageEngine Log360 before Build 5219 allows a CSRF att…8.8
• CVE-2021-40173Zoho ManageEngine Cloud Security Plus before Build 4117 allo…8.8
• CVE-2021-40174Zoho ManageEngine Log360 before Build 5224 allows a CSRF att…8.8
• CVE-2021-40175Zoho ManageEngine Log360 before Build 5219 allows unrestrict…9.8