1 matches found
GHSA-F2Q5-6MX7-Q9QQ Browsershot Local File Inclusion
Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. Note: This is a bypass of the fix for CVE-2024-21549...
8.6CVSS8.4AI score0.00537EPSS
SaveExploits0References7
20