CVE-2025-51591

Опубликовано: 11 июл. 2025

Источник: debian

Описание

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
pandoc	unfixed			package

Примечания

https://github.com/jgm/pandoc/issues/10682
https://github.com/jgm/pandoc/commit/67edf7ce7cd3563a180ae44bd122b012e22364f8
Fix simply updates the documentation

Связанные уязвимости

CVE-2025-51591

CVSS3: 6.5

ubuntu

около 1 месяца назад

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.

CVE-2025-51591

CVSS3: 4.8

redhat

около 1 месяца назад

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.

CVE-2025-51591

CVSS3: 6.5

nvd

около 1 месяца назад

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.

GHSA-mcv3-ch54-xqfh

CVSS3: 6.5

github

около 1 месяца назад

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe.