← All advisories

High severity7.5NVD Advisory· Published Jan 7, 2021· Updated Jun 17, 2026

CVE-2020-13449

CVE-2020-13449

Description

A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.

Affected products

3

Gotenberg/Gotenberg2 versions
cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*range: <=6.2.1
- (no CPE)range: <=6.2.1
Gotenberg/Gotenbergdescription

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/thecodingmachine/gotenberg/issues/199nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.