Advisories · Technology
Stirling-Tools Stirling-PDF.
Every CVE that names Stirling-Tools Stirling-PDF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read
- Stirling-Tools Stirling-PDF
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass
- Stirling-Tools Stirling-PDF
- Path traversal
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Stirling-PDF 3.0.0 through 3.2.0 Authorization Bypass via Processing Folders
- Stirling-Tools Stirling-PDF
- Broken access control
- CVSS 8.6 High
Stirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-database
- Stirling-Tools Stirling-PDF
- CWE-184
- CVSS 9.1 CriticalCritical · CVSS 9+
Stirling-PDF: Remote Code Execution via H2
- Stirling-Tools Stirling-PDF
- Code injection
- CVSS 8.5 High
Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint
- Stirling-Tools Stirling-PDF
- Information disclosure
- Hard-coded credentials
- CVSS 8.1 High
Stirling PDF: Stored XSS in Info Summary
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)
- CVSS 8.6 High
Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPrint Subprocess
- Stirling-Tools Stirling-PDF
- Server-side request forgery (SSRF)
- CVSS 6.1 Medium
Stirling-PDF: Reflected XSS through crafted PDF metadata fields (Title and Author)
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)
- CVSS 3.1 Low
Stirling-PDF: Reflected XSS through crafted filename in file upload functionality
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)
- CWE-20
- CVSS 5.4 Medium
Stirling-PDF has Stored Cross Site Scripting (XSS) via EML-to-HTML Export
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Stirling-PDF vulnerable to DoS via add-watermark
- Stirling-Tools Stirling-PDF
- Denial of service
- CVSS 8.1 High
Stirling-PDF Zip Slip: Arbitrary File Write via Path Traversal in Markdown-to-PDF ZIP Extraction
- Stirling-Tools Stirling-PDF
- Path traversal
- CVSS 8.6 High
Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf
- Stirling-Tools Stirling-PDF
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf
- Stirling-Tools Stirling-PDF
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf
- Stirling-Tools Stirling-PDF
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability
- Stirling-Tools Stirling-PDF
- Server-side request forgery (SSRF)
- CVSS 2.0 Low
Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)
- CWE-20
- CVSS 2.3 Low
Stirling-Tools Stirling-PDF Markdown-to-PDF cross site scripting
- Stirling-Tools Stirling-PDF
- Cross-site scripting (XSS)