Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-23345

Server-side Request Forgery (SSRF)

Description

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as <iframe src='file:///etc/passwd'>.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a github.com/thecodingmachine/gotenberg

  • 0 to < unspecifiedaffected

References