CVE-2025-51591: n/a
A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf.
AI Analysis
Technical Summary
CVE-2025-51591 describes an SSRF vulnerability in JGM Pandoc version 3.6.4 where attackers can exploit the default behavior of retrieving and parsing untrusted HTML content to inject a crafted iframe. This can potentially allow attackers to access and compromise the infrastructure hosting Pandoc. The vulnerability is linked to Pandoc's handling of HTML content and its interaction with external PDF engines, which may also be vulnerable to SSRF. Mitigation strategies include using the '--sandbox' option or 'pandoc-server' to restrict content processing and reduce SSRF risk.
Potential Impact
The vulnerability allows an attacker to perform SSRF attacks by injecting crafted iframes, potentially leading to unauthorized access to internal infrastructure components. The impact is limited to information disclosure (confidentiality impact) without integrity or availability effects, as reflected by the CVSS vector (C:L/I:N/A:N). No known exploits are reported in the wild.
Mitigation Recommendations
No official patch is currently available for this vulnerability. Users should mitigate the risk by using the '--sandbox' option or running Pandoc in 'pandoc-server' mode to restrict processing of untrusted HTML content. Avoid using external '--pdf-engine' options that may introduce additional SSRF risks. Monitor vendor advisories for any future patches or updates.
CVE-2025-51591: n/a
Description
A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf.
CVSS v3.1
Score 3.7low
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-51591 describes an SSRF vulnerability in JGM Pandoc version 3.6.4 where attackers can exploit the default behavior of retrieving and parsing untrusted HTML content to inject a crafted iframe. This can potentially allow attackers to access and compromise the infrastructure hosting Pandoc. The vulnerability is linked to Pandoc's handling of HTML content and its interaction with external PDF engines, which may also be vulnerable to SSRF. Mitigation strategies include using the '--sandbox' option or 'pandoc-server' to restrict content processing and reduce SSRF risk.
Potential Impact
The vulnerability allows an attacker to perform SSRF attacks by injecting crafted iframes, potentially leading to unauthorized access to internal infrastructure components. The impact is limited to information disclosure (confidentiality impact) without integrity or availability effects, as reflected by the CVSS vector (C:L/I:N/A:N). No known exploits are reported in the wild.
Mitigation Recommendations
No official patch is currently available for this vulnerability. Users should mitigate the risk by using the '--sandbox' option or running Pandoc in 'pandoc-server' mode to restrict processing of untrusted HTML content. Avoid using external '--pdf-engine' options that may introduce additional SSRF risks. Monitor vendor advisories for any future patches or updates.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- mitre
- Date Reserved
- 2025-06-16T00:00:00.000Z
- State
- PUBLISHED
Threat ID: 687115a1a83201eaacaefd54
Added to database: 07/11/2025, 13:46:09 UTC
Last enriched: 07/05/2026, 21:01:12 UTC
Last updated: 09/10/2026, 19:36:50 UTC
Views: 162
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.