CVE-2019-17400

Impact

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
• https://github.com/unoconv/unoconv/pull/510
• https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
• https://github.com/unoconv/unoconv/pull/510