Lucene search
+L

90 matches found

attackerkb
attackerkb
•added 2022/08/22 4:15 p.m.•8 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS7.3AI score0.15385EPSS
SaveExploits5References5
OSV
OSV
•added 2022/08/22 4:15 p.m.•19 views

DEBIAN-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS8.5AI score0.15385EPSS
SaveExploits5References1
Prion
Prion
•added 2022/08/22 4:15 p.m.•26 views

Server side request forgery (ssrf)

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

7.5CVSS9.3AI score0.15385EPSS
SaveExploits5References4Affected Software1
OSV
OSV
•added 2022/08/22 4:15 p.m.•29 views

UBUNTU-CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS5.8AI score0.15385EPSS
SaveExploits5References4
OSV
OSV
•added 2022/08/22 12:00 a.m.•28 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

6.6AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•2 views

CVE-2022-35583: Server-Side Request Forgery (SSRF)

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS8.2AI score0.15385EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2022/08/22 12:00 a.m.•44 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.6AI score0.15385EPSS
SaveExploits5References4
Debian CVE
Debian CVE
•added 2022/08/22 12:00 a.m.•133 views

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets...

9.8CVSS8.9AI score0.15385EPSS
SaveExploits5
CNNVD
CNNVD
•added 2022/08/22 12:00 a.m.•25 views

wkhtmltopdf 代码问题漏洞

wkhtmltopdf is wkhtmltopdf open source a library . Used to convert HTML to PDF. A code issue vulnerability exists in wkhtmltopdf version 0.12.6, which stems from the fact that it allows an attacker to gain initial access to a target system by injecting an iframe tag with the IP address of the...

9.8CVSS8.2AI score0.15385EPSS
SaveExploits5References6
CVE
CVE
•added 2022/08/22 12:00 a.m.•297 views

CVE-2022-35583

The CVE-2022-35583 entry pertains to wkhtmltopdf 0.12.6, which is vulnerable to Server-Side Request Forgery (SSRF) via crafted iframe injection. The connected exploit document provides a Pandoc-based SSRF PoC claiming it can compromise the infrastructure by injecting an iframe, indicating practic...

9.8CVSS9.3AI score0.15385EPSS
SaveExploits5References4Affected Software1
NVD
NVD
•added 2022/08/15 8:15 p.m.•21 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS0.02052EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/15 8:15 p.m.•37 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS6.1AI score
SaveExploits0References2
OSV
OSV
•added 2022/08/15 8:15 p.m.•4 views

DEBIAN-CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7.2AI score0.02052EPSS
SaveExploits1References1
OSV
OSV
•added 2022/08/15 8:15 p.m.•10 views

UBUNTU-CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7.1AI score0.02052EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2022/08/15 8:15 p.m.•37 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7AI score0.02052EPSS
SaveExploits1References4
Prion
Prion
•added 2022/08/15 8:15 p.m.•20 views

Directory traversal

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

5CVSS7.1AI score0.02052EPSS
SaveExploits1References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/15 12:00 a.m.•4 views

CVE-2020-21365: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS7.2AI score0.02052EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/08/15 12:00 a.m.•48 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7AI score0.02052EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/15 12:00 a.m.•19 views

wkhtmltopdf 路径遍历漏洞

wkhtmltopdf is wkhtmltopdf open source a library . Used to convert HTML to PDF. A security vulnerability exists in wkhtmltopdf version 0.12.5 and earlier versions. Remote attackers use this vulnerability to read local files and leak sensitive information through specially crafted html files...

7.5CVSS7.2AI score0.02052EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2022/08/15 12:00 a.m.•64 views

CVE-2020-21365

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations...

7.5CVSS6.7AI score0.02052EPSS
SaveExploits1
Rows per page
Query Builder