Логотип exploitDog
bind:CVE-2019-13358
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-13358

Количество 2

Количество 2

nvd логотип

CVE-2019-13358

больше 6 лет назад

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-q74v-wmpg-rr8q

больше 3 лет назад

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.

CVSS3: 7.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-13358

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

CVSS3: 7.5
42%
Средний
больше 6 лет назад
github логотип
GHSA-q74v-wmpg-rr8q

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system.

CVSS3: 7.5
42%
Средний
больше 3 лет назад

Уязвимостей на страницу