Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/02/05 6:30 a.m.15 views

Browsershot Path Traversal

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html, which can be bypassed by omitting the slashes in the file URI e.g., file:../../../../etc/passwd. This is due to missing validations of the use...

8.8CVSS6.6AI score0.0045EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder