ConvertX vulnerabilities
5 known vulnerabilities in ConvertX from C4illin. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
ConvertX: Cross-Site Request Forgery
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF protection. If an authenticated user visits attacker-controlled content that requests /delete/{id}, the browser send
- 8.1 High severity
ConvertX: Improper Limitation of a Pathname to a Restricted Directory
ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unaut
- 9.9 Critical severity
ConvertX: Inclusion of Functionality from Untrusted Control Sphere
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.
- 8.1 High severity
ConvertX: Improper Limitation of a Pathname to a Restricted Directory
ConvertXis a self-hosted online file converter. In versions prior to 0.17.0, the `POST /delete` endpoint uses a user-controlled `filename` value to construct a filesystem path and deletes it via `unlink` without sufficient validation. By supplying path travers
- 8.8 High severity
ConvertX: Improper Limitation of a Pathname to a Restricted Directory
ConvertXis a self-hosted online file converter. In versions prior to 0.16.0, the endpoint `/upload` allows an authenticated user to write arbitrary files on the system, overwriting binaries and allowing code execution. The upload function takes `file.name` dir