3 matches found
CVE-2020-13452
In Gotenberg through 6.2.1, insecure permissions for tini writable by user gotenberg potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution...
9.8CVSS7.1AI score0.02746EPSS
SaveExploits1
CVE-2020-13452
In Gotenberg through 6.2.1, insecure permissions for tini writable by user gotenberg potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution...
9.8CVSS9.5AI score0.02746EPSS
SaveExploits1References2
CVE-2020-13452
Gotenberg <= 6.2.1 is affected by insecure permissions on tini (writable by the gotenberg user), enabling an attacker to overwrite files and potentially trigger denial of service or code execution. Vulnerability details are supported by multiple sources (e.g., Red Hat, CNVD, OSV, Veracode) and...
9.8CVSS9.5AI score0.02746EPSS
SaveExploits1References2Affected Software1
20