281 matches found
GO-2024-2996 CVE-2024-21527 in github.com/gotenberg/gotenberg
CVE-2024-21527 in github.com/gotenberg/gotenberg...
CVE-2024-21527
CVE-2024-21527 affects github.com/gotenberg/gotenberg/v8/pkg/gotenberg, v8/pkg/modules/chromium, and v8/pkg/modules/webhook prior to 8.1.0. The issue is Server-side Request Forgery (SSRF) via the /convert/html endpoint when a request targets a localhost file, enabling local file inclusion and acc...
CVE-2024-40639
Rejected reason: This CVE is a duplicate of another CVE...
CVE-2024-40639
This CVE entry is rejected/not used; it does not represent an active vulnerability.
CVE-2024-24792 vulnerabilities
Vulnerabilities for packages: hugo, gotenberg, hugo-extended, ollama, chainctl...
GHSA-9PHM-FM57-RHG8 vulnerabilities
Vulnerabilities for packages: hugo, gotenberg, hugo-extended, ollama, chainctl...
CVE-2024-24788 vulnerabilities
Vulnerabilities for packages: kubernetes-dashboard-metrics-scraper, shfmt, aws-load-balancer-controller-fips, aws-flb-kinesis-fips, flux-source-controller, runc, tempo, dgraph, spegel, cue, ip-masq-agent, vertical-pod-autoscaler-fips, hey, pulumi-language-dotnet, libnvidia-container, cilium-fips,...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when a request is made to a file via localhost, such as . By exploiting this vulnerability, an attacker can achieve local file inclusion, allowing of sensitive files read o...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when a request is made to a file via localhost, such as . By exploiting this vulnerability, an attacker can achieve local file inclusion, allowing of sensitive files read o...
Server-Side Request Forgery
gotenberg is vulnerable to Server-Side Request Forgery. The vulnerability exists due to an insecure exposure of password when converting html into a PDF using the /html endpoint...
CVE-2020-14161
It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint...
CVE-2020-14161
It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint...
CVE-2020-14160
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
CVE-2020-14160
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
Server side request forgery (ssrf)
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
CVE-2020-14160
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources...
CVE-2020-14160
Gotenberg up to version 6.2.1 contains an SSRF in the remote URL to PDF conversion, allowing an attacker to read local files or access intranet resources. Affected component is the PDF conversion endpoint that processes remote URLs. The issue is evidenced across multiple sources (NVD description ...