8.5High
Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API
Foxit Software Inc. Foxit PDF Services API
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., …