Convertx
Monthly
Arbitrary file read in ConvertX 0.17.0 allows authenticated users to exfiltrate files accessible to the server process by exploiting the xelatex converter's handling of LaTeX directives. Crafted `.tex` files containing `\input{path}` or `\verbatiminput{path}` directives cause the TeX engine to read and embed target file contents into downloadable PDF output, bypassing any application-level access controls on those files. No active exploitation has been confirmed (not in CISA KEV), and a fix is available in v0.18.0 per the upstream repository reference.
Arbitrary file deletion in ConvertX prior to version 0.17.0 allows authenticated attackers to remove files outside the intended upload directory by exploiting insufficient path validation in the POST /delete endpoint. The vulnerability enables attackers to supply path traversal sequences that bypass directory restrictions, with impact limited only by server process permissions. Public exploit code exists for this HIGH severity flaw, though a patch is available in version 0.17.0.
Arbitrary file read in ConvertX 0.17.0 allows authenticated users to exfiltrate files accessible to the server process by exploiting the xelatex converter's handling of LaTeX directives. Crafted `.tex` files containing `\input{path}` or `\verbatiminput{path}` directives cause the TeX engine to read and embed target file contents into downloadable PDF output, bypassing any application-level access controls on those files. No active exploitation has been confirmed (not in CISA KEV), and a fix is available in v0.18.0 per the upstream repository reference.
Arbitrary file deletion in ConvertX prior to version 0.17.0 allows authenticated attackers to remove files outside the intended upload directory by exploiting insufficient path validation in the POST /delete endpoint. The vulnerability enables attackers to supply path traversal sequences that bypass directory restrictions, with impact limited only by server process permissions. Public exploit code exists for this HIGH severity flaw, though a patch is available in version 0.17.0.