CVEs-PoC/2020/CVE-2020-13450.md

CVE-2020-13450

Description

A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. This can lead to DoS, a change to program behavior, or code execution.

POC

Reference

• http://packetstormsecurity.com/files/160744/Gotenberg-6.2.0-Traversal-Code-Execution-Insecure-Permissions.html

Github

• https://github.com/br0xpl/gotenberg_hack