Skip to contentPwndoc Project Pwndoc vulnerabilities
- pwndocPwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.jsonCVE-2025-274136.5 Medium
- pwndocPwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as adminCVE-2025-27410Public exploit6.5 Medium
- pwndocCross-Site Request Forgery (CSRF) allows creating admin account with POST requestCVE-2025-230446.8 Medium
- pwndocpwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS)CVE-2024-556536.5 Medium
- pwndocPenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path TraversalCVE-2024-556027.6 High
- pwndoc project pwndocAn issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges...CVE-2022-45771Public exploit8.8 High
- pwndoc project pwndocPwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by...CVE-2022-440235.3 Medium
- pwndoc project pwndocPwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by...CVE-2022-440225.3 Medium
- pwndoc project pwndocPwnDoc through 2021-04-22 has incorrect JSON Webtoken handling, leading to incorrect access...CVE-2021-315908.8 High