This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐จ **Essence**: Gotenberg's metadata endpoint fails to sanitize **values** (only keys were fixed). <br>๐ฅ **Consequence**: Attackers inject newlines to split ExifTool commands.โฆ
๐ฆ **Vendor**: Gotenberg. <br>๐ **Affected**: Versions **v8.30.1 and earlier**. <br>๐ณ **Context**: Docker-based stateless PDF API service. If you run an older version, you are vulnerable. โ ๏ธ
Q4What can hackers do? (Privileges/Data)
๐ต๏ธ **Actions**: Rename processed PDFs, move files to arbitrary paths, overwrite files, or create **Symlinks/HardLinks** anywhere in the container filesystem. <br>๐ **Impact**: High Integrity & Availability loss.โฆ
๐ **Auth**: **None required**. Unauthenticated. <br>๐ฏ **Config**: Low complexity. Direct API access to metadata endpoints. <br>๐ **Verdict**: Extremely easy to exploit if the service is exposed. ๐ช๐
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ซ **Public Exp**: No specific PoC code provided in the data. <br>๐ **Status**: Advisory published. Likely exploitable via manual crafting of metadata values with newlines. โณ
Q7How to self-check? (Features/Scanning)
๐ **Check**: Scan for Gotenberg services. <br>๐งช **Test**: Send metadata requests with **newline characters** (`\n`) in the **value** field.โฆ
๐ ๏ธ **Fix**: Upgrade to version **> v8.30.1**. <br>๐ **Source**: Commit `405f106` and GHSA advisory `q7r4-hc83-hf2q` confirm the fix. ๐โ
Q9What if no patch? (Workaround)
๐ง **Workaround**: If upgrading is impossible, **restrict network access** to the metadata endpoint. <br>๐ก๏ธ **Mitigate**: Implement WAF rules to block newline characters in metadata values. ๐งฑ
Q10Is it urgent? (Priority Suggestion)
๐ฅ **Priority**: **CRITICAL**. <br>๐จ **Reason**: Unauthenticated, easy exploitation, high impact (file system manipulation). Patch immediately! ๐โโ๏ธ๐จ