CVE-2019-17400

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion.

Date published : 2019-10-21

A Tale of Exploitation in Spreadsheet File Conversions

https://github.com/unoconv/unoconv/pull/510