USN-6232-1: wkhtmltopdf vulnerability
It was discovered that wkhtmltopdf was not properly enforcing the same-origin policy when processing certain HTML files. If a user or automated system using wkhtmltopdf were tricked into processing a specially crafted HTML file, an attacker could possibly use this issue to expose sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this wkhtmltopdf vulnerability?
The vulnerability ID for this wkhtmltopdf vulnerability is USN-6232-1.
What is the affected software for this vulnerability?
The affected software for this vulnerability is wkhtmltopdf on Ubuntu 14.04, 16.04, 18.04, and 20.04.
How does this vulnerability impact users?
This vulnerability can allow an attacker to expose sensitive information if a specially crafted HTML file is processed by wkhtmltopdf.
How can I fix this vulnerability?
To fix this vulnerability, update wkhtmltopdf to version 0.12.5-1ubuntu0.1 or later if you are using Ubuntu 14.04, 16.04, 18.04, or 20.04.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following links: 1. [CVE-2020-21365](https://ubuntu.com/security/CVE-2020-21365) 2. [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-6232-1)