What’s Vulnerable › Products

pwndoc vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your pwndoc version is affected

Latest pwndoc vulnerabilities

• CVE-2025-27413 — PwnDoc Arbitrary File Write to RCE using Path Traversal in template update from backup templates.json (CVSS 4.9)
• CVE-2025-27410 — PwnDoc Arbitrary File Write to RCE using Path Traversal in backup restore as admin (CVSS 6.5)
• CVE-2025-23044 — Cross-Site Request Forgery (CSRF) allows creating admin account with POST request (CVSS 8.1)
• CVE-2024-55652 — PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters (CVSS 6.5)
• CVE-2024-55653 — pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) (CVSS 6.5)
• CVE-2024-55602 — PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal (CVSS 8.5)
• CVE-2022-45771 — (CVSS 8.8)
• CVE-2022-44023 — (CVSS 5.3)
• CVE-2022-44022 — (CVSS 5.3)
• CVE-2021-31590 — (CVSS 8.8)