ShowDoc 2.4.1 allows remote attackers to edit other users' notes by navigating with a modified page_id.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19620.json"