Skip to content
OpenAdvisories

Vendor

vworld4u

1 known vulnerabilities.

Products

office-converter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-37282

    office-converter through 1.0.2 OS Command Injection via fileName in generatePdf

    office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf() or generateHtml(). Attackers can embed $(...), backticks, or a closing quote with shell me…

    vworld4u office-converter