Lucene search

K
osvGoogleOSV:GHSA-HCQ6-H8V2-R5WM
HistoryMay 10, 2021 - 6:38 p.m.

Server-Side Request Forgery in node-pdf-generator

2021-05-1018:38:34
Google
osv.dev
12
node-pdf-generator
ssrf attack
user input validation
version 0.0.6

EPSS

0.001

Percentile

48.3%

This affects all versions of package node-pdf-generator up to and including 0.0.6. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.

EPSS

0.001

Percentile

48.3%

Related for OSV:GHSA-HCQ6-H8V2-R5WM