CVE-2019-12153

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0740%

EPSS Percentile20.26th

Published2019年6月11日

Last Modified2024年11月21日

Vulnerability Description

Lack of validation in the HTML parser in RealObjects PDFreactor before 10.1.10722 leads to SSRF, allowing attackers to access network or file resources on behalf of the server by supplying malicious HTML content.

Affected Platforms (CPE)

📦

Realobjects

Pdfreactor

< 10.1.10722

References & Advisories

🔗 https://blog.gdssecurity.com/labs/2019/5/28/ssrf-and-xxe-vulnerabilities-in-pdfreactor.html

🔗 https://www.pdfreactor.com/important-pdfreactor-security-advisory/

🔗 https://www.pdfreactor.com/pdfreactor-10-maintenance-release-10-1-10722-now-available/