The Apryse HTML2PDF SDK versions up to and including 11.6.0 contain a Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) vulnerability in the InsertFromHtmlString() function. Exploitation could allow an unauthenticated attacker to read files on the server or induce the server to send HTTP requests to arbitrary destinations. This can lead to sensitive information disclosure or potentially system takeover. The CVSS v3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact.

Successful exploitation can disclose sensitive local files on the server and allow the attacker to make arbitrary HTTP requests from the server to internal or external systems. This can lead to information leakage and potentially enable further attacks or system compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently provided. Users should monitor the vendor's security advisories for updates and apply any official patches once available. Until then, consider restricting access to the vulnerable function and limiting server permissions to reduce potential impact.