Home

Description

Content injected to PDF rendering contexts could, in many places, include HTML content including <img> tags. If the src attribute of these images pointed to an URL, the PDF rendering engine would download the image from that place and display it, thereby leaking information about the rendering server and possibly creating an SSRF vector in the local network.

PUBLISHED Reserved 2026-06-24 | Published 2026-06-25 | Updated 2026-06-25 | Assigner rami.io




LOW: 2.1CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Problem types

CWE-80 Improper neutralization of Script-Related HTML tags in a web page (basic XSS)

Product status

Default status
unaffected

Any version before 2026.3.4
affected

2026.4.0 (python) before 2026.4.4
affected

2026.5.0 (python) before 2026.5.2
affected

Credits

Rokkam Vamshi finder

References

pretix.eu/about/en/blog/20260625-release-2026-5-2/

cve.org (CVE-2026-57535)

nvd.nist.gov (CVE-2026-57535)

Download JSON