CVEvulnerability

CVE-2026-71270

8.6 HIGH Published 2026-08-05 Modified 2026-10-24 Official page ↗
Status
Deferred
Published
2026-08-05
Last modified
2026-10-24
Assigner
309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
CVSS 3.1 (309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c)
8.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-918

Description

Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SSRF protections that were added to three sibling conversion endpoints (html/pdf, file/pdf, markdown/pdf).

Related

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References