Lucene search
+L

1 matches found

Cvelist
Cvelist
added yesterday8 views

CVE-2026-44829 Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename

Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base on Linux, which does not treat backslashes as path separators, so a multipart filename containing Windows-style parent directory components survives...

8.8CVSS0.00032EPSS
SaveExploits0References4
Rows per page
Query Builder