The vulnerability is a Server‑Side Request Forgery in the PDF generation endpoint. The backend constructs an internal URL from the request base URL without validating the Host header, allowing a malicious request to cause the server to fetch any URL. The server then embeds the retrieved content into a PDF that is returned to the attacker, which can expose internal services, cloud metadata, or other resources on the internal network, potentially leaking confidential data and enabling further attacks.

Pentestify, version 1.0.0 and earlier. The advisory recommends upgrading to 1.1.0 or newer. No other vendor or product is listed.

The CVSS score is 6.9, indicating moderate severity. EPSS is not available, so the likelihood of exploitation is unknown, and the vulnerability is not listed in KEV. An attacker can exploit it remotely by sending an HTTP GET request to /api/reports/{id}/pdf with a crafted Host header, causing the server to perform outbound requests to arbitrary URLs.