2 matches found
CVE-2019-13358
lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format...
7.5CVSS7.4AI score0.2427EPSS
SaveExploits4References4
Format string
lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format...
5CVSS7.4AI score0.2427EPSS
SaveExploits4References4Affected Software1
20