Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-35583
HistoryAug 22, 2022 - 4:15 p.m.

Server side request forgery (ssrf)

2022-08-2216:15:00
PRIOn knowledge base
www.prio-n.com
7

9.3 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target’s system by injecting iframe tag with initial asset IP address on it’s source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets.

CPENameOperatorVersion
wkhtmltopdfeq0.12.6

9.3 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.2%