CVE-2019-13358

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system

published July 5, 2019

CVSS
—
EPSS
24%
Percentile
97.9
In the wild
Unconfirmed
What it is

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24270 · 97.9th percentile
Published
2019-07-05T20:26Z
EPSS history
Timeline
  • 05 JUL 20:26Z
    lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system
    cvelistv5