Skip to content
OpenAdvisories

Vendor

TurboDocx

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.9

    TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download

    TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata address…