vulnerability
Debian: CVE-2020-21365: wkhtmltopdf -- security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:C/I:N/A:N) | Aug 15, 2022 | Oct 26, 2022 | Mar 30, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Aug 15, 2022
Added
Oct 26, 2022
Modified
Mar 30, 2026
Description
Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.
Solution
debian-upgrade-wkhtmltopdf
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.