Threats tagged 'ghsa-wm5v-62gw-298q'

Gotenberg versions 8.31.0 up to but not including 8.38.0 contain a server-side request forgery (SSRF) vulnerability in the IsPublicIP() function. This flaw allows unauthenticated attackers to bypass private IP deny-list protections by exploiting IPv6 zone identifiers. By appending a zone such as %25eth0 to certain IPv6 addresses in parameters like downloadFrom, webhook, or Chromium/LibreOffice URLs, attackers can access internal services and extract data included in generated PDFs.