Description
In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or code execution.
Unscored
CVE-2020-13452
EUVD-2020-5705GHSA-p869-hg26-w7c6
In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file,…
Published Jan 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre