CVE-2020-13451

Name of the Vulnerable Software and Affected Versions Gotenberg versions through 6.2.1

Description An incomplete-cleanup vulnerability in the Office rendering engine allows an attacker to overwrite LibreOffice configuration files and execute arbitrary code via macros.

Recommendations For Gotenberg versions through 6.2.1, update to a version later than 6.2.1 to resolve the issue. As a temporary workaround, consider restricting the execution of macros in LibreOffice configuration files to minimize the risk of exploitation.