spatie

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

spatie records in CISA KEV

No spatie vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Browsershot · all components

TI-2022-21618 CVE-2022-43984 · GHSA-6q49-35h6-rq2p

HIGH 69

Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00676 Published 2022-11-25 Fixed in 3.57.4 CWE-79

TI-2022-21617 CVE-2022-43983 · GHSA-82h9-v8vh-mfpq

HIGH 69

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00704 Published 2022-11-25 Fixed in 3.57.3 CWE-79

TI-2022-20098 CVE-2022-41706 · GHSA-8c2c-jxwj-jqgf

HIGH 69

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00662 Published 2022-11-25 Fixed in 3.57.3 CWE-79

TI-2020-06306 CVE-2020-7790 · GHSA-rv74-mh27-4jpv

LOW 26

This affects the package spatie/browsershot from 0.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01034 Published 2020-12-11 Fixed in 3.40.1 CWE-22