Server-Side Request Forgery

2021-08-3012:15:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gotenberg

ssrf

html-to-pdf

vulnerability

password exposure

EPSS

0.001

Percentile

34.7%

JSON

gotenberg is vulnerable to Server-Side Request Forgery. The vulnerability exists due to an insecure exposure of password when converting html into a PDF using the /html endpoint

References

github.com/gotenberg/gotenberg/issues/215

github.com/gotenberg/gotenberg/issues/261

github.com/gotenberg/gotenberg/pull/319

github.com/thecodingmachine/gotenberg/releases

EPSS

0.001

Percentile

34.7%

JSON

Related for VERACODE:31874