{"id":64118,"date":"2025-08-17T10:38:35","date_gmt":"2025-08-17T10:38:35","guid":{"rendered":""},"modified":"2025-09-26T20:58:28","modified_gmt":"2025-09-27T02:58:28","slug":"cve-2025-55150-ssrf-vulnerability-in-stirling-pdf-web-application","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-55150-ssrf-vulnerability-in-stirling-pdf-web-application\/","title":{"rendered":"CVE-2025-55150: SSRF Vulnerability in Stirling-PDF Web Application<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

In today’s post, we delve into the intricacies of a critical vulnerability discovered in the Stirling-PDF web application, a widely used locally hosted application that performs various operations on PDF files. The vulnerability, identified as CVE-2025-55150, affects the application’s ability to securely convert HTML to PDF, potentially leading to system compromise or data leakage. As the vulnerability scores an 8.6 on CVSS Severity<\/a> Score, understanding, detecting, and mitigating this risk is of paramount importance to prevent substantial damage to system integrity and confidentiality.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-55150
\nSeverity: Critical (8.6 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data<\/a> leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Stirling-PDF | Prior to 1.1.0<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The exploit leverages the \/api\/v1\/convert\/html\/pdf endpoint in the Stirling-PDF application. When converting HTML to PDF, the backend makes a call to a third-party tool and includes a sanitizer for security sanitization. However, due to insufficient security measures in place, an attacker can bypass this sanitizer, leading to a Server Side Request Forgery<\/a> (SSRF) vulnerability. This allows the attacker to make requests from the vulnerable<\/a> server to internal resources that would otherwise be inaccessible, potentially leading to system compromise or data leakage.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Here’s a conceptual example of how the vulnerability might be exploited:<\/p>\n

POST \/api\/v1\/convert\/html\/pdf HTTP\/1.1\nHost: target.example.com\nContent-Type: application\/json\n{\n\"html\": \"\"\n}<\/code><\/pre>\n
In this example, the attacker is using the HTML to PDF conversion feature to make an internal request, potentially accessing<\/a> sensitive information or functionality.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
Users of the affected Stirling-PDF<\/a> versions are urged to apply the vendor patch provided in version 1.1.0 to guard against this vulnerability. As a temporary mitigation measure, users can deploy a Web<\/a> Application Firewall (WAF) or Intrusion Detection System (IDS) to monitor and block potential SSRF attempts. However, the application of the vendor patch remains the most effective solution to this vulnerability<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview In today’s post, we delve into the intricacies of a critical vulnerability discovered in the Stirling-PDF web application, a widely used locally hosted application that performs various operations on PDF files. The vulnerability, identified as CVE-2025-55150, affects the application’s ability to securely convert HTML to PDF, potentially leading to system compromise or data leakage. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[101],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-64118","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-ssrf"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t