Lucene search
+L
JsreportPhantom-html-to-pdf

1 matches found

CVE
CVE
added 2020/11/05 1:25 p.m.60 views

CVE-2020-7763

CVE-2020-7763 affects the npm package phantom-html-to-pdf and is an arbitrary file read vulnerability present in versions before 0.6.1. The weakness is demonstrated by a PoC (in the GitHub advisory and Snyk reference) that bypasses file access restrictions to read local host files (e.g., using wi...

7.5CVSS7.5AI score0.01598EPSS
Save