PT-2026-20836 · Softvisions · Webpdf
CVE-2025-55853
·
Publicado
2026-02-19
·
Atualizado
2026-02-24
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
SoftVision webPDF versions prior to 10.0.2
Description
The software contains a Server-Side Request Forgery (SSRF) issue. The PDF converter function does not validate requested resources in uploaded files, permitting protocols like http:// and file:///. An attacker can upload an XML or HTML file, which, when converted to PDF, enables internal port scanning and Local File Inclusion (LFI).
Recommendations
Update to version 10.0.2 or later.
Exploit
Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Webpdf