CVE-2023-54402

HIGH 7.5

iDocView SSRF via /doc/upload Endpoint Hardcoded Token

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthenticated attackers to fetch arbitrary URLs by supplying a hardcoded default token value (testtoken) to bypass authentication. Attackers can exploit the unrestricted URL scheme handling, including file:// URIs, to read arbitrary local files such as operating-system and application configuration files, and to reach internal network hosts and services not otherwise accessible. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-03-26.

CWE	CWE-918
Vendor	idocview
Product	idocview
Published	Sep 30, 2026

Stay Ahead of the Next One

Get instant alerts for idocview idocview

Be the first to know when new high vulnerabilities affecting idocview idocview are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

iDocView / iDocView

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/idoc/idocview-lfi.yaml blog.csdn.net: https://blog.csdn.net/qq_41904294/article/details/134995343 vulncheck.com: https://www.vulncheck.com/advisories/idocview-ssrf-via-doc-upload-endpoint-hardcoded-token

Credits

🔍 The Shadowserver Foundation