Advisories · Technology
alam00000 bentopdf.
Every CVE that names alam00000 bentopdf among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
BentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker
- alam00000 bentopdf
- Race condition
- Server-side request forgery (SSRF)
- CVSS 3.4 Low
BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests
- alam00000 bentopdf
- Information disclosure
- Insecure deserialization
- CVSS 8.6 High
BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass
- alam00000 bentopdf
- Server-side request forgery (SSRF)
- CVSS 7.0 High
BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration
- alam00000 bentopdf
- Cross-site scripting (XSS)