Skip to content
OpenAdvisories

Vendor

Pentestify

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.9

    SSRF in Pentestify PDF generation endpoint via Host header

    Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to arbitrary internal or external URLs, incl…