Pwndoc
6 CVEs across 1 Pwndoc products. Browse Pwndoc vulnerabilities, severities, and proof-of-concept exploits.
Pwndoc products with known CVEs
Pwndoc CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-27413 | Medium | 6.5 | 2025-02-28 | PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into th… |
CVE-2025-27410 | Medium | 6.5 | 2025-02-28 | PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerable to path traversal in the TAR entry's… |
CVE-2025-23044 | Medium | 6.8 | 2025-01-20 | PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This in… |
CVE-2024-55652 | Medium | 6.5 | 2024-12-12 | PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx templat… |
CVE-2024-55653 | Medium | 6.5 | 2024-12-10 | PwnDoc is a penetration test report generator. In versions up to and including 0.5.3, an authenticated user is able to crash the backend by raising a `Unhandle… |
CVE-2024-55602 | High | 7.6 | 2024-12-10 | PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and downlo… |