Server side request forgery (ssrf)

2021-08-2611:15:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.2%

JSON

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.

CPENameOperatorVersion
gotenbergle6.2.1

CPE	Name	Operator	Version
	gotenberg	le	6.2.1

References

github.com/gotenberg/gotenberg/issues/215

github.com/gotenberg/gotenberg/pull/319

github.com/thecodingmachine/gotenberg/releases