Lucene search
Veracode Vulnerability DatabaseVERACODE:29535HistoryMar 01, 2021 - 10:10 a.m.
Server Side Request Forgery (SSRF)
2021-03-0110:10:10
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
39.6%
github.com/thecodingmachine/gotenberg is vulnerable to Server Side Request Forgery (SSRF). An attacker is able to send malicious requests on behalf of the application via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as .
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/thecodingmachine/gotenberg | le | 6.3.1 |
Related
cve
cve
CVE-2021-23345
2021-02-26 18:15:12
cvelist
cvelist
CVE-2021-23345 Server-side Request Forgery (SSRF)
2021-02-26 00:00:00
nvd
nvd
CVE-2021-23345
2021-02-26 18:15:12
prion
prion
Server side request forgery (ssrf)
2021-02-26 18:15:00