CyberRota Analysis
AI-GeneratedThe libreoffice-convert Node.js module prior to version 1.8.2 is vulnerable to directory traversal attacks, allowing attackers to manipulate the options.fileName parameter to write files to arbitrary locations within the filesystem, including sensitive areas like SSH authorized_keys or cron configurations. This could lead to unauthorized access or privilege escalation on affected systems. Organizations using this module, particularly those handling sensitive documents or operating in environments with elevated privileges, should prioritize upgrading to version 1.8.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libreoffice-convert is a Node.js module for converting office documents to different formats. Prior to 1.8.2, index.js uses the caller-controlled options.fileName value in path.join(tempDir.name, fileName) without reducing it to a base name. A filename containing ../ can escape the temporary directory because path.basename() normalization is missing and write the supplied document buffer to an arbitrary path writable by the process, including an SSH authorized_keys file, a cron configuration, or a web root. This issue is fixed in version 1.8.2.