[Git][security-tracker-team/security-tracker][master] Add CVE-2022-35583/wkhtmltopdf

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
228e5280 by Salvatore Bonaccorso at 2022-08-23T09:12:29+02:00
Add CVE-2022-35583/wkhtmltopdf

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7891,7 +7891,8 @@ CVE-2022-35585 (A stored cross-site scripting (XSS) issue in the ForkCMS version
 CVE-2022-35584
 	RESERVED
 CVE-2022-35583 (wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to g ...)
-	TODO: check
+	- wkhtmltopdf <unfixed>
+	NOTE: https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/initial-access-via-pdf-file-silently
 CVE-2022-35582
 	RESERVED
 CVE-2022-35581



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e528061cc47e84b1aa035a6a7bbdc62f65e42

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e528061cc47e84b1aa035a6a7bbdc62f65e42
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220823/d07042d4/attachment-0001.htm>