SSRF in Pentestify
CVE-2026-13150
Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to arbitrary internal or…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Pentestify — versions 0