Lucene search
+L

CVE-2020-28463

🗓️ 18 Feb 2021 16:15:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve
🔗 ubuntu.com👁 43 Views

All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. Use trustedSchemes & trustedHosts to reduce risk. Steps to reproduce SSRF attack by injecting an img tag and creating a nc listener

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
23 Aug 202222:32
–ibm
astralinux
AstraLinux
Astra Linux – Vulnerability in python-reportlab
15 Oct 202615:53
–astralinux
bdu_fstec
BDU FSTEC
ReportLab Python PDF Access
21 Feb 202400:00
–bdu_fstec
circl
Circl
CVE-2020-28463
18 Feb 202118:50
–circl
cnnvd
CNNVD
ReportLab code issue vulnerabilities
18 Feb 202100:00
–cnnvd
cnvd
CNVD
Reportlab Server-Side Request Forgery Vulnerability
17 Mar 202100:00
–cnvd
cve
CVE
CVE-2020-28463
18 Feb 202116:00
–cve
cvelist
Cvelist
CVE-2020-28463 Server-side Request Forgery (SSRF)
18 Feb 202116:00
–cvelist
debian
Debian
[SECURITY] [DLA 3590-1] python-reportlab security update
29 Sep 202319:57
–debian
debiancve
Debian CVE
CVE-2020-28463
18 Feb 202116:00
–debiancve
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu18.04allpython-reportlab0python-reportlab_0_all.deb
Ubuntu20.04allpython-reportlab0python-reportlab_0_all.deb
Ubuntu16.04allpython-reportlab0python-reportlab_0_all.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Aug 2025 12:23Current
6.7Medium risk
Vulners AI Score6.7
CVSS 24
CVSS 3.16.5
EPSS0.01346
43