CVE-2020-37282 | vworld4u office-converter up to 1.0.2 File Name generatePdf/generateHtml fileName os command injection

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in vworld4u office-converter up to 1.0.2. Affected by this vulnerability is the function generatePdf/generateHtml of the component File Name Handler. The manipulation of the argument fileName leads to os command injection.

This vulnerability is listed as CVE-2020-37282. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More