High · 7.5 CVE-2024-55082 EUVD-2024-52737GHSA-g378-8vq5-m8fm

A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sens…

Published Dec 19, 2024 · Updated Jan 2, 2025 · Assigned by mitre

Description

A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attackers to access sensitive information via a crafted request.

References

https://github.com/summerxxoo/VulnPoc/blob/main/Stirling-PDF-%20Server-Side%20Request%20Forgery%28SSRF%29%20vulnerability.md
https://gist.github.com/summerxxoo/f98033dbf1ab81a045c1196c3a1ab3ef