Description
Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints (html/pdf, file/pdf, markdown/pdf).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Stirling-Tools | Stirling-PDF | — | — |
References
- https://github.com/Stirling-Tools/Stirling-PDF third-party-advisory