Vulnerability Database

319,897

Total vulnerabilities in the database

CVE-2022-35583

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastructure by accessing their internal assets.

  • Published: Aug 22, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-35583
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
wkhtmltopdf / wkhtmltopdf 0.12.6 0.12.6.x