Vulnerabilities > CVE-2019-13358 - XXE vulnerability in Opencats

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
opencats
CWE-611
NVD
Published: 2019-07-05
Updated: 2024-11-21

Summary

lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

Vulnerable Configurations

Part Description Count
Application
Opencats
8

Common Weakness Enumeration (CWE)

References