Lucene search
K

CVE-2020-14161

🗓️ 26 Aug 2021 10:57:42Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
CNNVD
Thecodingmachine Gotenberg 跨站脚本漏洞
26 Aug 202100:00
cnnvd
Cvelist
CVE-2020-14161
26 Aug 202110:57
cvelist
EUVD
EUVD-2020-6318
7 Oct 202500:30
euvd
NVD
CVE-2020-14161
26 Aug 202111:15
nvd
Prion
Hardcoded credentials
26 Aug 202111:15
prion
RedhatCVE
CVE-2020-14161
22 May 202516:19
redhatcve
Snyk
Server-side Request Forgery (SSRF)
19 Jan 202114:35
snyk
Snyk
Server-side Request Forgery (SSRF)
19 Jan 202114:35
snyk
Veracode
Server-Side Request Forgery
30 Aug 202112:15
veracode
NVD
Node
ParameterPositionPathDescriptionCWE
HTML contentrequest body/convert/htmlHTML/JavaScript injection vulnerability in HTML to PDF conversion via /convert/html (CVE-2020-14161, CWE-79)CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:02Current
6.1Medium risk
Vulners AI Score6.1
CVSS 24.3
CVSS 3.16.1
EPSS0.00307
39