CVE-2019-13358

2019-07-0521:15:10

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.073 Low

EPSS

Percentile

94.1%

JSON

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

CPENameOperatorVersion
opencatseq0.9.4-1
opencatseq0.9.1a
opencatseqopencats-0.9.3(alpha)
opencatseqdelete
opencatseq0.9.3
opencatseq0.9.4
opencatseq0.9.3-3-test-release
opencatseqopencats-0.9.3
opencatseq0.9.3-2
opencatseq0.9.4-2

Name	Operator	Version
opencats	eq	0.9.4-1
opencats	eq	0.9.1a
opencats	eq	opencats-0.9.3(alpha)
opencats	eq	delete
opencats	eq	0.9.3
opencats	eq	0.9.4
opencats	eq	0.9.3-3-test-release
opencats	eq	opencats-0.9.3
opencats	eq	0.9.3-2
opencats	eq	0.9.4-2