Aller au contenu
Se connecter
8.2 Élevée

CVE-2022-43983 Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files

Description

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the HTML content passed to the Browsershot::html method does not contain URL's that use the file:// protocol.

Produits et versions touchés

Produit Versions touchées Corrigé en
Browsershot 3.57.2 Pas de correctif indiqué

Autres CVE de Browsershot

Les 3 CVE de Browsershot →
CVE-2022-41706 Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files 8.2 Élevée CVE-2022-43984 Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files 8.2 Élevée
Suivre cette CVE