Mandiant reported a High Vulnerability in Wkhtmltopdf 0.12.6. An attacker could exploit this vulnerability to get initial access into the target's system by injecting iframe tag with initial asset IP address on its source. This allows the attacker to take over the whole infrastructure by accessing their internal assets.

For a complete description of the vulnerabilities and affected systems go to CVE-2022-35583 Detail

IT Security

Read more about IT Security service offerings.