CVE-2024-13285: wkhtmltopdf - Highly critical - Unsupported - SA-CONTRIB-2024-049
Published Jan 9, 2025
·Updated
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf: ..
Affected Software
2 affected components
wkhtmlTOpdf wkhtmltopdf=*.*
wkhtmlTOpdf Wkhtmltopdf Drupal
Event History
Jan 9, 2025
CVE Published
via MITRE·08:11 PM
Data Sourced
via MITRE·08:11 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-13285?
CVE-2024-13285 has been classified as a critical vulnerability affecting Drupal's implementation of wkhtmltopdf.
2
How do I fix CVE-2024-13285?
To fix CVE-2024-13285, upgrade to the latest version of wkhtmltopdf as specified in the security advisory.
3
What systems are affected by CVE-2024-13285?
CVE-2024-13285 affects all versions of wkhtmltopdf employed within Drupal.
4
What exploits exist for CVE-2024-13285?
CVE-2024-13285 has the potential for remote code execution, allowing attackers to exploit the vulnerability without authentication.
5
Is there a workaround for CVE-2024-13285?
Currently, there are no recommended workarounds for CVE-2024-13285; upgrading is advised.