Lucene search
+L

35 matches found

Cvelist
Cvelist
added 2026/08/19 2:35 p.m.28 views

CVE-2026-44829 Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename

Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base on Linux, which does not treat backslashes as path separators, so a multipart filename containing Windows-style parent directory components survives...

8.8CVSS0.00372EPSS
SaveExploits0References4
Rows per page
Query Builder