Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS, a change to program behavior, or code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Thecodingmachine Gotenberg 路径遍历漏洞
Vulnerability Description
Thecodingmachine Gotenberg是Victornpb（Thecodingmachine）个人开发者的一个基于Go的可将HTML，Markdown和Office文档转换为PDF的应用。该应用基于Docker的无状态API可用于支持构建Web应用。 Gotenberg 6.2.1文件上传功能中存在安全漏洞，允许攻击者上传和覆盖目标文件夹之外的任何可写文件。这可能导致DoS、程序行为的改变或代码执行。
CVSS Information
N/A
Vulnerability Type
N/A