CVE-2025-51591

CVE Enrichment

CVSS: 3.7 LOW
EPSS: 0.74%
EPSS Percentile: 53.27%
CISA KEV: Not listed

Description

A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via injecting a crafted iframe. Note: Some users have stated that Pandoc by default can retrieve and parse untrusted HTML content which can enable SSRF vulnerabilities. Using the ‘--sandbox’ option or ‘pandoc-server’ can mitigate such vulnerabilities. Using pandoc with an external ‘--pdf-engine’ can also enable SSRF vulnerabilities, such as CVE-2022-35583 in wkhtmltopdf.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@mitre.org
Published: 11-Jul-2025 21:15
Last Modified: 06-Jul-2026 00:17
EPSS Date: 2026-10-12
CWE: CWE-918

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:H /
                            PR:N /
                            UI:N /
                            S:U /
                            C:L /
                            I:N /
                            A:N

References

Last enrichment sync: 13-Oct-2026 01:45
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

tracked an active SSRF-to-IMDS campaign targeting EC2-hosted applications throughout March 2025 [9]. CVE-2025-51591 is a dedicated SSRF-to-IMDS CVE that explicitly identifies this as a critical cloud attack vector Unauthenticated MCP Server Exposed AWS Credentials Through SSRF and File Inclusion

CVE (5)

Malware (2)

Threat Actors (1)

Vendors (3)

Products (7)

Tools (3)

Industries (4)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.