CVE-2021-23345 : 詳細

CVE-2021-23345

5.3
/
中
0.21%V4
2021-02-26
17h20 +00:00
Server-Side Request Forgery - SSRF
A10-Server-Side Req. Forgery (SSRF)
Network
2024-09-16
17h17 +00:00
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Server-side Request Forgery (SSRF)

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as