CVE-2019-17400

CVE-2019-17400

EPSS 1.9%

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/https://github.com/unoconv/unoconv/pull/510