CVE-2019-17400

Published October 21st, 2019

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

unoconv/unoconv

Universal Office Converter - Convert between any document format supported by LibreOffice/OpenOffice.

GitHub

2.75K