CVE-2026-13150

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-13150

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13150.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-13150

Published

2026-06-24T10:45:17.553Z

Modified

2026-07-15T01:48:52.900782464Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N CVSS Calculator

Summary

SSRF in Pentestify PDF generation endpoint via Host header

Details

Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to arbitrary internal or external URLs, including cloud metadata services, and return the rendered content in the resulting PDF via a crafted Host header, because the target URL is built from request.base_url without validation.

Database specific

{
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13150.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "1.1.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "fixed": "1.1.0"
                }
            ],
            "source": "CPE_FIELD"
        }
    ],
    "cna_assigner": "Secur0"
}

References

Affected packages

Git / github.com/ccyl13/pentestify

Affected ranges

Type

GIT

Repo

https://github.com/ccyl13/pentestify

Events

Introduced

Fixed

a058a22b42c6311895622645265df79a60265b1d

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13150.json"