admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-05-05 10:16:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/OpenCats/CVE-2019-13358
History
xiaoheihei1107 c4e9aa4af7
Add CVE-2019-13358
2021-09-24 17:48:23 +08:00
..
OpenCats_9_4_2_XXE_CVE_2019_13358.gif
Add CVE-2019-13358
2021-09-24 17:48:23 +08:00
README.md
Add CVE-2019-13358
2021-09-24 17:47:53 +08:00

README.md

OpenCats 9.4.2 XXE CVE-2019-13358

OpenCats is a leading free & open applicant tracking system.lib/DocumentToText.php in OpenCats before 0.9.4-3 has XXE that allows remote users to read files on the underlying operating system. The attacker must upload a file in the docx or odt format.

FOFA query rule: app="opencats-Login"

Demo

OpenCats_9_4_2_XXE_CVE_2019_13358