[CVE-2024-28184] Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)
Summary
Almost every feature-rich application emits a PDF at some point: invoice, receipt, report, certificate, contract, bank statement. And behind that “Export PDF” button there’s almost always an open-source lib assembling HTML with user data, throwing it at a parser and returning the file, on the server, with access to the filesystem, the internal network and, […]
- CVE
- CVE-2024-28184
- Published
- Collected
--- id: 9162 title: "[CVE-2024-28184] Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)" cve: CVE-2024-28184 source_domain: yokai.hakaisecurity.io source_url: "https://yokai.hakaisecurity.io/exploring-pdf-generators-0-days-across-90-million-targets-a-month/" published_at: "2026-06-23T19:45:34Z" tags: ["vulnerability-research", "research"] phying_url: "https://phying.com/item/9162" lang: en --- # [CVE-2024-28184] Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets) ## Summary Almost every feature-rich application emits a PDF at some point: invoice, receipt, report, certificate, contract, bank statement. And behind that “Export PDF” button there’s almost always an open-source lib assembling HTML with user data, throwing it at a parser and returning the file, on the server, with access to the filesystem, the internal network and, […] ## Intelligence Metadata - **Sources:** yokai.hakaisecurity.io - **CVE:** CVE-2024-28184 - **Published:** 2026-06-23T19:45:34Z - **Original:** https://yokai.hakaisecurity.io/exploring-pdf-generators-0-days-across-90-million-targets-a-month/ - **Phying News:** https://phying.com/item/9162