CVE-2025-55151CWE-918

Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf

High · published August 11, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, the "convert file to pdf" functionality (/api/v1/convert/file/pdf) uses LibreOffice's unoconvert tool for conversion, and SSRF vulnerabilities exist during the conversion process. This issue has been patched in version 1.1.0.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-08-11T21:56Z
EPSS history
Timeline
  • 11 AUG 21:56Z
    Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf
    cvelistv5