First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2021-4000

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

showdoc is vulnerable to URL Redirection to Untrusted Site

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
star7th	star7th/showdoc	>= unspecified, < 2.9.13

References

Timeline

Published: Dec 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-400008.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command CVE-2021-400015.3The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeTime application to be CVE-2021-400028.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command CVE-2021-400035.3HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2021-400047.5The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may affect data confidential CVE-2021-400057.5The distributed data service component has a vulnerability in data access control. Successful exploitation of this vulnerability may affect CVE-2021-400064.6Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentialit CVE-2021-400076.5There is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is caused by improper log output management. A CVE-2021-400087.5There is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800 V200R019C00SPC800, CloudEngine 6800 V200R019C0 CVE-2021-400095.3There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect ser CVE-2021-40014.1A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kerne CVE-2021-400109.8The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.

CVE-2021-4000: Medium severity, CVSS 6.1 | Vulnix