High severity7.5NVD Advisory· Published Aug 26, 2021· Updated Jun 17, 2026

CVE-2020-14160

Description

An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files or fetch intranet resources.

Affected products

Gotenberg/Gotenberg2 versions
cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*range: <=6.2.1
- (no CPE)range: <=6.2.1
Gotenberg/Gotenbergdescription

Patches

Vulnerability mechanics

References

github.com/gotenberg/gotenberg/pull/319nvdPatchThird Party Advisory
github.com/gotenberg/gotenberg/issues/215nvdIssue TrackingThird Party Advisory
github.com/thecodingmachine/gotenberg/releasesnvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000