CVE-2019-17400
2 advisories.
PyPI/unoconv CVE-2019-17400: high 7.5
Server-Side Request Forgery in unoconv
Action: Upgrade unoconv to 0.9.0 or later.
pip install unoconv==0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: GHSA-27p5-7cw6-m45h
- https://nvd.nist.gov/vuln/detail/CVE-2019-17400
- https://github.com/unoconv/unoconv/pull/510
- https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions
- https://github.com/advisories/GHSA-27p5-7cw6-m45h
- https://github.com/pypa/advisory-database/tree/main/vulns/unoconv/PYSEC-2019-213.yaml
- https://github.com/unoconv/unoconv
CVE-2019-17400 · published · modified · JSON
PyPI/unoconv CVE-2019-17400: unknown
The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.
Action: Upgrade unoconv to 0.9.0 or later.
pip install unoconv==0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: PYSEC-2019-213
- https://github.com/unoconv/unoconv/pull/510
- https://buer.haus/2019/10/18/a-tale-of-exploitation-in-spreadsheet-file-conversions/
- https://github.com/advisories/GHSA-27p5-7cw6-m45h
CVE-2019-17400 · published · modified · JSON