Skip to content

CVE record · 1 source

CVE-2020-37282

CVSS 9.8

office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted…

Vendor: Microsoft
Product: office
CVSS: 9.8
EPSS: 0.034 (p89)
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 17d ago

office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted…

office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf() or generateHtml(). Attackers can embed $(...), backticks, or…

CVSS 9.8 CVE-2020-37282 Microsoft