Vendor
TurboDocx
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.9
TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download
TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata address…