id: GO-2024-2996
modules:
    - module: github.com/gotenberg/gotenberg/v7
      vulnerable_at: 7.10.2
    - module: github.com/gotenberg/gotenberg/v8
      versions:
        - fixed: 8.1.0
      vulnerable_at: 8.0.3
summary: CVE-2024-21527 in github.com/gotenberg/gotenberg
cves:
    - CVE-2024-21527
credits:
    - Filip Ochnik
references:
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-21527
    - fix: https://github.com/gotenberg/gotenberg/commit/ad152e62e5124b673099a9103eb6e7f933771794
    - web: https://gist.github.com/filipochnik/bc88a3d1cc17c07cec391ee98e1e6356
    - web: https://github.com/gotenberg/gotenberg/releases/tag/v8.1.0
    - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGGOTENBERG-7537081
    - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESCHROMIUM-7537082
    - web: https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMGOTENBERGGOTENBERGV8PKGMODULESWEBHOOK-7537083
source:
    id: CVE-2024-21527
    created: 2024-07-23T17:00:15.373291-04:00
review_status: UNREVIEWED