CVE-2024-21527:详情

CVE-2024-21527

8.8
/
高危
0.12%V4
2024-07-19
05h00 +00:00
Server-Side Request Forgery - SSRF
A10-Server-Side Req. Forgery (SSRF)
Network
2026-07-02
15h25 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Versions of the package github.com/gotenberg/gotenberg/v8/pkg/gotenberg before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/chromium before 8.1.0; versions of the package github.com/gotenberg/gotenberg/v8/pkg/modules/webhook before 8.1.0 are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when a request is made to a file via localhost, such as