VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 6, 2017· Updated Jun 17, 2026

CVE-2016-10320

CVE-2016-10320

Description

textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be a remote attack if a web application accepts names of arbitrary uploaded files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Textract Project/Textract2 versions
    cpe:2.3:a:textract_project:textract:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:textract_project:textract:*:*:*:*:*:*:*:*range: <=1.4.0
    • (no CPE)range: <1.5.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.