Gotenberg

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and overwrite any writable files outside the intended folder. T…CVE-2020-13450Thecodingmachine · 5.8% likely

   CWE-22

2. A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.CVE-2020-13449Thecodingmachine · 5.0% likely

   CWE-22

3. An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary…CVE-2020-13451Thecodingmachine · 3.2% likely

   CWE-459

4. In Gotenberg through 6.2.1, insecure permissions for tini (writable by user gotenberg) potentially allow an attacker to overwrite the file, which can lead to denial of service or…CVE-2020-13452Thecodingmachine · 2.9% likely

   CWE-276

5. An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet re…CVE-2020-14160Thecodingmachine · 1.7% likely

   CWE-918

6. It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint.CVE-2020-14161Thecodingmachine · 0.9% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.