---
id: 9162
title: "[CVE-2024-28184] Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)"
cve: CVE-2024-28184
source_domain: yokai.hakaisecurity.io
source_url: "https://yokai.hakaisecurity.io/exploring-pdf-generators-0-days-across-90-million-targets-a-month/"
published_at: "2026-06-23T19:45:34Z"
tags: ["vulnerability-research", "research"]
phying_url: "https://phying.com/item/9162"
lang: en
---

# [CVE-2024-28184] Discovering 0-days in HTML-to-PDF Generators (90 million monthly targets)

## Summary

Almost every feature-rich application emits a PDF at some point: invoice, receipt, report, certificate, contract, bank statement. And behind that “Export PDF” button there’s almost always an open-source lib assembling HTML with user data, throwing it at a parser and returning the file, on the server, with access to the filesystem, the internal network and, […]

## Intelligence Metadata

- **Sources:** yokai.hakaisecurity.io
- **CVE:** CVE-2024-28184
- **Published:** 2026-06-23T19:45:34Z
- **Original:** https://yokai.hakaisecurity.io/exploring-pdf-generators-0-days-across-90-million-targets-a-month/
- **Phying News:** https://phying.com/item/9162