Miembros de
Boletines de Vulnerabilidades |
CVE-2026-40893 |
|
| Software afectado | DOCKER |
| Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.31.0, Gotenberg only checks if the tag is exactly FileName, so System:FileName slips right through and ExifTool happily renames the file. This allows remote attackers to move, rename, and change permissions for arbitrary files. This vulnerability is fixed in 8.31.0. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-40893 | |
