Vulnerabilities > Thecodingmachine > High

DATE CVE VULNERABILITY TITLE RISK
2021-08-26 CVE-2020-14160 Server-Side Request Forgery (SSRF) vulnerability in Thecodingmachine Gotenberg
An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.
network
low complexity
thecodingmachine CWE-918
7.5
2021-01-07 CVE-2020-13449 Path Traversal vulnerability in Thecodingmachine Gotenberg
A directory traversal vulnerability in the Markdown engine of Gotenberg through 6.2.1 allows an attacker to read any container files.
network
low complexity
thecodingmachine CWE-22
7.5