Unscored CVE-2020-14160 EUVD-2020-6317GHSA-4f9m-6h5h-cg9v

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able …

Published Aug 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.

References

https://github.com/thecodingmachine/gotenberg/releases
https://github.com/gotenberg/gotenberg/pull/319
https://github.com/gotenberg/gotenberg/issues/215