CVE-2020-14160

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.
References
Link Resource
https://github.com/thecodingmachine/gotenberg/releases Release Notes Third Party Advisory
https://github.com/gotenberg/gotenberg/issues/215 Issue Tracking Third Party Advisory
https://github.com/gotenberg/gotenberg/pull/319 Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*

Information

Published : 2021-08-26 04:15

Updated : 2021-09-01 10:15


NVD link : CVE-2020-14160

Mitre link : CVE-2020-14160


JSON object : View

CWE
CWE-918

Server-Side Request Forgery (SSRF)

Advertisement

dedicated server usa

Products Affected

thecodingmachine

  • gotenberg