Lucene search
K

CVE-2019-13358

šŸ—“ļøĀ 05 Jul 2019Ā 20:26:22Reported byĀ mitreTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 383Ā Views🌐 WEB

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
OpenCats 0.9.4-2 -(docx) XML External Entity Injection Vulnerability
22 Sep 202100:00
–zdt
Circl
CVE-2019-13358
5 Jul 201923:59
–circl
CNVD
OpenCats Cross-Site Scripting Vulnerability
9 Jul 201900:00
–cnvd
Cvelist
CVE-2019-13358
5 Jul 201920:26
–cvelist
NVD
CVE-2019-13358
5 Jul 201921:15
–nvd
Packet Storm
OpenCats 0.9.4-2 XML Injection
22 Sep 202100:00
–packetstorm
Prion
Format string
5 Jul 201921:15
–prion
RedhatCVE
CVE-2019-13358
22 May 202510:05
–redhatcve
NVD
Node
opencatsopencatsRange<0.9.4-3
ParameterPositionPathDescriptionCWE
resumeFilebinarycareers/index.phpXXE in crafted docx uploaded via the resumeFile field leading to remote file readCWE-611

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 04:24Current
6.3Medium risk
Vulners AI Score6.3
CVSS 25
CVSS 3.17.5
EPSS0.39744
383