CVE-2022-35583

🗓️ 22 Aug 2022 00:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 123 Views🌐 WEB

"CVE-2022-35583: SSRF vulnerability in wkhtmlTOpdf 0.12.6

Reporter	Title	Published	Views	Family All 16
0day.today	wkhtmltopdf 0.12.6 - Server Side Request Forgery Vulnerability	23 Mar 202300:00	–	zdt
ATTACKERKB	CVE-2022-35583	22 Aug 202216:15	–	attackerkb
GithubExploit	Exploit for Server-Side Request Forgery in Wkhtmltopdf	25 Sep 202506:29	–	githubexploit
Circl	CVE-2022-35583	25 Sep 202511:21	–	circl
CNNVD	wkhtmltopdf 代码问题漏洞	22 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-35583	22 Aug 202200:00	–	cvelist
Debian CVE	CVE-2022-35583	22 Aug 202200:00	–	debiancve
NVD	CVE-2022-35583	22 Aug 202216:15	–	nvd
OSV	DEBIAN-CVE-2022-35583	22 Aug 202216:15	–	osv
OSV	UBUNTU-CVE-2022-35583	22 Aug 202216:15	–	osv

NVD

Node

wkhtmltopdf wkhtmltopdfMatch0.12.6

Source	Link
drive	www.drive.google.com/file/d/1LAmf_6CJLk5qDp0an2s_gVQ0TN2wmht5/view
cyber-guy	www.cyber-guy.gitbook.io/cyber-guys-blog/blogs/initial-access-via-pdf-file-silently
wkhtmltopdf	www.wkhtmltopdf.org/
packetstormsecurity	www.packetstormsecurity.com/files/171446/wkhtmltopdf-0.12.6-Server-Side-Request-Forgery.html

Parameter	Position	Path	Description	CWE
__RequestVerificationToken	request body	PDF/FromHTML	SSRF via wkhtmltopdf FromHTML endpoint allowing iframe pointing to internal resource	CWE-918
header	request body	PDF/FromHTML	SSRF via wkhtmltopdf FromHTML endpoint allowing iframe pointing to internal resource	CWE-918
data	request body	PDF/FromHTML	SSRF via wkhtmltopdf FromHTML endpoint allowing iframe pointing to internal resource	CWE-918

18 Mar 2025 18:42Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

EPSS0.58596

CWE-918 In Wild

cve-2022-35583 ssrf wkhtmltopdf 0.12.6 vulnerability nvd