CVE-2020-14160

Katalog CVE

CVSS 7.5 · High EPSS 1,7%

Kerentanan Server-Side Request Forgery (SSRF) pada thecodingmachine gotenberg. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.

Rincian

Terbit di NVD

26 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gotenberg/gotenberg/pull/319 patch · advisory pihak ketiga
• https://github.com/gotenberg/gotenberg/issues/215 issue tracking · advisory pihak ketiga
• https://github.com/thecodingmachine/gotenberg/releases release notes · advisory pihak ketiga