Threats tagged 'ghsa-r4xg-82px-pwx6'

ConvertX versions up to 0.19.0 have an arbitrary file read vulnerability. Authenticated users can exploit this by uploading a specially crafted reStructuredText document that includes an absolute file path. The vulnerability arises because the Pandoc converter is invoked without the --sandbox flag, allowing the inclusion and reading of arbitrary server files in the conversion output.