/Vulnerability Library

Stirling-PDF < 1.1.0 - Server-Side Request Forgery

CVE-2025-55150
Verified

Description

Stirling-PDF < 1.1.0 contains a server side request forgery caused by bypassing the sanitizer in the /api/v1/convert/html/pdf endpoint when processing HTML to PDF conversion, letting attackers perform SSRF, exploit requires local access.

Severity

High

CVSS Score

9.8

Exploit Probability

2%

Affected Product

stirling_pdf

Published Date

March 30, 2026

Template Author

weqi

CVE-2025-55150.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2025-55150
CWE ID:
cwe-918

References

https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-xw8v-9mfm-g2pmhttps://nvd.nist.gov/vuln/detail/CVE-2025-55150

Remediation Steps

Upgrade to version 1.1.0 or later.