Vulnerability Details CVE-2020-13449
A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.032
EPSS Ranking 86.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
- https://github.com/thecodingmachine/gotenberg/issues/199
- http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html
- https://github.com/thecodingmachine/gotenberg/issues/199
Products affected by CVE-2020-13449
-
cpe:2.3:a:thecodingmachine:gotenberg:3.0.0
-
cpe:2.3:a:thecodingmachine:gotenberg:3.0.1
-
cpe:2.3:a:thecodingmachine:gotenberg:3.0.2
-
cpe:2.3:a:thecodingmachine:gotenberg:3.1.0
-
cpe:2.3:a:thecodingmachine:gotenberg:3.1.1
-
cpe:2.3:a:thecodingmachine:gotenberg:3.1.2
-
cpe:2.3:a:thecodingmachine:gotenberg:3.2.0
-
cpe:2.3:a:thecodingmachine:gotenberg:4.0.0
-
cpe:2.3:a:thecodingmachine:gotenberg:4.1.0
-
cpe:2.3:a:thecodingmachine:gotenberg:4.2.0
-
cpe:2.3:a:thecodingmachine:gotenberg:4.2.1
-
cpe:2.3:a:thecodingmachine:gotenberg:4.3.0
-
cpe:2.3:a:thecodingmachine:gotenberg:4.4.0
-
cpe:2.3:a:thecodingmachine:gotenberg:5.0.0
-
cpe:2.3:a:thecodingmachine:gotenberg:5.0.1
-
cpe:2.3:a:thecodingmachine:gotenberg:5.0.2
-
cpe:2.3:a:thecodingmachine:gotenberg:5.1.0
-
cpe:2.3:a:thecodingmachine:gotenberg:6.0.0
-
cpe:2.3:a:thecodingmachine:gotenberg:6.0.1
-
cpe:2.3:a:thecodingmachine:gotenberg:6.0.2
-
cpe:2.3:a:thecodingmachine:gotenberg:6.0.3
-
cpe:2.3:a:thecodingmachine:gotenberg:6.0.4
-
cpe:2.3:a:thecodingmachine:gotenberg:6.1.0
-
cpe:2.3:a:thecodingmachine:gotenberg:6.1.1
-
cpe:2.3:a:thecodingmachine:gotenberg:6.1.2
-
cpe:2.3:a:thecodingmachine:gotenberg:6.2.0
-
cpe:2.3:a:thecodingmachine:gotenberg:6.2.1