REDHAT-BUG-2430858: SSRF
WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources (such as localhost services or cloud metadata endpoints) even when a developer has implemented a custom urlfetcher to block such access. This occurs because the underlying urllib library follows HTTP redirects automatically without re-validating the new destination against the developer's security policy. Version 68.0 contains a patch for the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
weasyprintto a version that resolves this vulnerability.Fixed in 68.0
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2430858?
The severity of REDHAT-BUG-2430858 is classified as high with a severity score of 7.
How do I fix REDHAT-BUG-2430858?
To fix REDHAT-BUG-2430858, upgrade WeasyPrint to version 68.0 or later.
What type of vulnerability is REDHAT-BUG-2430858?
REDHAT-BUG-2430858 is categorized as a server-side request forgery (SSRF) vulnerability.
What can attackers access through REDHAT-BUG-2430858?
Attackers can exploit REDHAT-BUG-2430858 to access internal network resources, including localhost services and cloud metadata.
Which software is affected by REDHAT-BUG-2430858?
The vulnerability REDHAT-BUG-2430858 affects WeasyPrint, specifically versions prior to 68.0.