CVE-2020-13451 in Gotenberg

Summary

by MITRE • 01/08/2021

An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 01/08/2021
• Moderation: accepted
• Entry: VDB-167432
• CPE: ready
• CWE: Unknown
• Exploit: Download
• CVSS: 5.5 (VulDB)
• EPSS: 0.03020
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-13451
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-13451
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-13451/