What is GHSA-5p98-wpc9-g498?

GHSA-5p98-wpc9-g498 is a security advisory published by GitHub Security Advisories with High severity. Server-Side Request Forgery in html-pdf-chrome

Why does GHSA-5p98-wpc9-g498 have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-5p98-wpc9-g498?

GHSA-5p98-wpc9-g498 affects 1 product, including: npm/html-pdf-chrome:\u003c 0.6.1.

GHSA-5p98-wpc9-g498HighDisclosed before NVD

Server-Side Request Forgery in html-pdf-chrome

Vendor

GitHub Security Advisories

Published

September 4, 2020

Last Modified

January 11, 2023

📋 Description

Recommendation

This package is working as intended. A Security section has been added since v0.6.1 to detail proper usage of this library. Npm has revoked their advisory altogether.

Original Advisory

All versions of html-pdf-chrome are vulnerable to Server-Side Request Forgery (SSRF). The package executes HTTP requests if the parsed HTML contains external references to resources, such as <iframe src="http://localhost" height="800px" width="800px"></iframe>. This allows attackers to access resources through HTTP that are accessible to the server, including private resources in the hosting environment.

🎯 Affected products1

npm/html-pdf-chrome:< 0.6.1

🔗 References (3)

https://github.com/westy92/html-pdf-chrome/issues/249
https://www.npmjs.com/advisories/1339
https://github.com/advisories/GHSA-5p98-wpc9-g498