Spatie Browsershot
4 CVEs affecting Spatie Browsershot. Latest disclosed: 2022-11-25. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-41706 | High | 8.2 | 2022-11-25 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the… |
CVE-2022-43984 | High | 8.2 | 2022-11-25 | Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate tha… |
CVE-2022-43983 | High | 8.2 | 2022-11-25 | Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate tha… |
CVE-2020-7790 | Medium | 5.3 | 2020-12-11 | This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resul… |