嗯，用户让我帮忙总结一下这篇文章的内容，控制在100个字以内，而且不需要用“文章内容总结”之类的开头。首先，我得仔细阅读文章，抓住关键点。 文章主要讲的是ShowDoc服务器被攻击者利用CVE-2025-0520漏洞进行攻击。这是一个远程代码执行的高危漏洞，CVSS评分9.4分。ShowDoc是一个在线协作工具，帮助IT团队分享文档和提高沟通效率。 漏洞影响的是2.8.7版本之前的所有版本，问题在于文件上传验证不充分，导致攻击者可以上传恶意文件，执行任意PHP代码。这个漏洞在2020年10月已经修复了，但仍有大量服务器没有打补丁。 根据VulnCheck的研究报告，全球有超过2000个实例暴露在互联网上，大部分在中国。攻击者可能通过这个漏洞完全控制服务器，危害很大。因此，建议使用ShowDoc的组织尽快升级到最新版本，并加强安全措施。 总结的时候要包括：ShowDoc被攻击、CVE编号、漏洞类型、影响范围、修复情况、暴露数量以及建议措施。控制在100字以内的话，需要简洁明了地表达这些信息。 可能会这样组织语言：“ShowDoc服务器因未修复CVE-2025-0520远程代码执行漏洞遭攻击。该漏洞允许未认证文件上传和代码执行，影响版本低于2.8.7。已有超2,000实例暴露在线，主要在中国。建议立即升级并加强防护。” 这样刚好101个字左右，稍微调整一下就能符合要求。 </think> ShowDoc服务器因未修复CVE-2025-0520远程代码执行漏洞遭攻击。该漏洞允许未认证文件上传和代码执行,影响版本低于2.8.7。已有超2,000实例暴露在线,主要在中国。建议立即升级并加强防护。 2026-4-14 09:13:40 Author: securityaffairs.com(查看原文) 阅读量:22 收藏
Attackers target unpatched ShowDoc servers via CVE-2025-0520
A critical RCE flaw, tracked as CVE-2025-0520, in ShowDoc is being actively exploited, putting unpatched servers at serious risk.
A critical remote code execution flaw, tracked as CVE-2025-0520 (CVSS score of 9.4), affecting ShowDoc is under active exploitation in the wild.
ShowDoc is an online tool that helps IT teams share documents and improve collaboration and communication efficiency.
Versions before 2.8.7 had an unauthenticated file upload flaw allowing attackers to deploy web shells and run code on servers. The issue was fixed in version 2.8.7, released in October 2020.
“An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution. This issue affects ShowDoc: before 2.8.7.” reads the advisory.
Threat actors are targeting unpatched servers, potentially gaining full control.
VulnCheck researchers warn that over 2,000 instances remain exposed online, mostly in China. The cybersecurity firm provides customers with payloads, artifacts, and intelligence.
Organizations using the tool are strongly urged to update and secure exposed instances immediately.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, CVE-2025-0520)
如有侵权请联系:admin#unsafe.sh