Gotenberg File Overwrite Vulnerability

Gotenberg is a Docker-powered stateless API for converting HTML, Markdown and Office documents to PDF. A file overwrite vulnerability exists in Gotenberg 6.2.1 and earlier versions. The vulnerability stems from insecure permissions in tini. An attacker can exploit the vulnerability to overwrite...

Code injection

In Gotenberg through 6.2.1, insecure permissions for tini writable by user gotenberg potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution...

CVE-2020-13452

In Gotenberg through 6.2.1, insecure permissions for tini writable by user gotenberg potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution...

CVE-2020-13452: Incorrect Default Permissions

In Gotenberg through 6.2.1, insecure permissions for tini writable by user gotenberg potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution...

PT-2021-9614

Name of the Vulnerable Software and Affected Versions Gotenberg versions 6.2.1 and earlier Description The issue is related to insecure permissions for tini, which is writable by the gotenberg user. This potentially allows an attacker to overwrite the file, leading to denial of service or code...

Thecodingmachine Gotenberg security vulnerability

Gotenberg is a Docker-powered stateless API for converting HTML, Markdown and Office documents to PDF. A file overwrite vulnerability exists in Gotenberg 6.2.1 and earlier versions. The vulnerability stems from insecure permissions in tini. An attacker can exploit the vulnerability to overwrite...