High severity7.8NVD Advisory· Published Apr 6, 2017· Updated May 13, 2026
CVE-2016-10320
CVE-2016-10320
Description
textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- seclists.org/oss-sec/2016/q4/442nvdExploitPatchThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.