Description
该漏洞为当使用/api/v1/convert/html/pdf端点将HTML转换为PDF时，后端会调用第三方工具进行处理，但其代码存在可以绕过的缺陷，从而导致服务端请求伪造漏洞。
Stirling-PDF 服务端请求伪造漏洞（CVE-2025-55150）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-55150
https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-xw8v-9mfm-g2pm
https://cve.imfht.com/detail/CVE-2025-55150?lang=en
https://www.sentinelone.com/vulnerability-database/cve-2025-55150/
https://cloud.tencent.com/developer/article/2651913
https://access.redhat.com/security/cve/cve-2025-55150
https://www.ameeba.com/blog/cve-2025-55150-ssrf-vulnerability-in-stirling-pdf-web-application/