2 matches found
CVE-2026-40893 Gotenberg: ExifTool Dangerous Tag Blocklist Bypass via Group-Prefixed Tag Names Allows Arbitrary File Rename and Move
Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files...
Update for Windows 10, version 1607 and Windows Server 2016: April 25, 2019
Update for Windows 10, version 1607 and Windows Server 2016: April 25, 2019 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Summary This update includes the quality improvements from KB4493470, in addition to these key changes: Addresses an issue in Server...