PT-2025-32591

CVE-2025-55151

Published

2025-08-11

Updated

2025-08-12

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Stirling-PDF versions prior to 1.1.0

Description: Stirling-PDF is a locally hosted web application used for PDF file operations. The “convert file to pdf” functionality, accessible via the /api/v1/convert/file/pdf API endpoint, is susceptible to Server-Side Request Forgery (SSRF) during the file conversion process. This occurs because the application utilizes LibreOffice’s unoconvert tool for conversion.

Recommendations: Upgrade to version 1.1.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ninjagpt

Vendors

Affected products

Weakness enumeration

CWE-918: Server-Side Request Forgery (SSRF)

Related identifiers