Wkhtmltopdf

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13285 Jan 09, 20:15 PHP CRITICAL This Week

Vulnerability in Drupal wkhtmltopdf.*. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Drupal Wkhtmltopdf

NVD

CVSS 3.1

9.8

EPSS

0.2%

CVE-2022-35583 Aug 22, 16:15 CRITICAL POC THREAT Act Now

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Wkhtmltopdf

NVD Exploit-DB

CVSS 3.1

9.8

EPSS

11.3%

CVE-2024-13285 PHP

EPSS 0% CVSS 9.8

CRITICAL This Week

Vulnerability in Drupal wkhtmltopdf.*. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Drupal Wkhtmltopdf

NVD

CVE-2022-35583

EPSS 11% CVSS 9.8

CRITICAL POC THREAT Act Now

SSRF Wkhtmltopdf

NVD Exploit-DB