Gotenberg Security Vulnerabilities and Issues — Gotenberg CVE List

Lucene search

ThecodingmachineGotenberg

2 matches found

CVE•added 2021/08/26 11:15 a.m.•29 views

CVE-2020-14161

It is possible to inject HTML and/or JavaScript in the HTML to PDF conversion in Gotenberg through 6.2.1 via the /convert/html endpoint.

6.1CVSS6.1AI score0.00307EPSS

CVE•added 2021/08/26 11:15 a.m.•26 views

CVE-2020-14160

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.

7.5CVSS7.3AI score0.00526EPSS