WS-2021-0040

In highcharts-export-server before version 2.1.0 there is a vulnerability that allows exposure of internal HTTP resources. The vulnerability allows for reading and outputting files served by other services on the internal network in which the export server is hosted. If the export server is expos...

highcharts-thumbnail-generation (>=1.0.0, <=1.0.10) potentially affected by unknown CVE via highcharts-export-server (1.0.21)

highcharts-export-server NPM version 1.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on highcharts-export-server and may be impacted: - highcharts-thumbnail-generation =1.0.0, =1.0.10 Source cves: unknown CVE Source advisory: MEND:WS-2021-0040...

Information Disclosure

highcharts-export-server is vulnerable to information disclosure. If the export server is accessible via internet, it allows reading of internal HTTP resources and outputting files served by other services on the internal network in which the export server is hosted...