CVE-2022-35583

EPSS 11.3%

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 11.3%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

22 Aug 2022Published on NVD

23 Mar 2023Public PoC

Weaponization speed

213 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/171446/wkhtmltopdf-0.12.6-Server-Side-Request-Forgery.htmlunverified exploitdbwww.exploit-db.com/exploits/51039unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/171446/wkhtmltopdf-0.12.6-Server-Side-Request-Forgery.html https://cyber-guy.gitbook.io/cyber-guys-blog/blogs/initial-access-via-pdf-file-silently https://drive.google.com/file/d/1LAmf_6CJLk5qDp0an2s_gVQ0TN2wmht5/view?usp=sharing https://wkhtmltopdf.org/