CVE-2025-55150 Scanner
CVE-2025-55150 Scanner - Server-Side Request Forgery (SSRF) vulnerability in Stirling-PDF
Used 2.8k times · 3.3k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-55150
9.8
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/html/pdf endpoint to convert HTML to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security sanitization which can be bypassed and result in SSRF. This issue has been patched in version 1.1.0.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
stirling-pdf
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: stirling-pdf
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →