CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2022-35583 wkhtmltopdf

参照URL

advisory github.com
advisory nvd.nist.gov
web packetstormsecurity.com
web drive.google.com
web wkhtmltopdf.org
web cyber-guy.gitbook.io