CVE-2024-1648

creationtimestamp| type| source ---|---|--- 2024-02-20 02:26:07+00:00| seen| https://t.me/ctinow/188044 2024-02-20 02:26:09+00:00| seen| https://t.me/ctinow/188046 2024-02-21 07:29:30+00:00| seen| https://t.me/arpsyndicate/3729 2025-02-14 10:05:08+00:00| seen|...

CVE-2024-1648

electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user...

CVE-2024-1648 electron-pdf 20.0.0 - Local File Read via Server Side XSS

electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user...

CVE-2024-1648

CVE-2024-1648 affects electron-pdf 20.0.0. The vulnerability stems from the application not validating user-supplied HTML content, enabling a remote attacker to read arbitrary local files. Root cause identified as improper HTML content validation. Impact is described as remote local-file access; ...