Lucene search

K
osvGoogleOSV:CVE-2020-7758
HistoryNov 02, 2020 - 10:15 p.m.

CVE-2020-7758

2020-11-0222:15:13
Google
osv.dev
5

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

Related for OSV:CVE-2020-7758