node-pdf-generator is a Web server to generate PDF's from HTML
Affected versions of this package are vulnerable to Server-Side Request Forgery (SSRF). Due to lack of user input validation and sanitization done to the content given to
node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.
git clone https://github.com/darrenhaken/node-pdf-generator.git cd node-pdf-generator npm install node index.js
The app will be available at https://localhost:1337
send crafted request like:
curl --location --request POST 'https://127.0.0.1:1337/' --header 'Content-Type: text/html' --data-raw ''
There is no fixed version for