Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: spatie Component: Browsershot Clear all filters
TI-2022-21618 CVE-2022-43984 · GHSA-6q49-35h6-rq2p

Browsershot 3.57.3 - Server Side XSS to LFR via HTML

Priority HIGH 69

Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00676 Published 2022-11-25 Fixed in 3.57.4 CWE-79
TI-2022-21617 CVE-2022-43983 · GHSA-82h9-v8vh-mfpq

Browsershot 3.57.2 - Server Side XSS to LFR via HTML

Priority HIGH 69

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00704 Published 2022-11-25 Fixed in 3.57.3 CWE-79
TI-2022-20098 CVE-2022-41706 · GHSA-8c2c-jxwj-jqgf

Browsershot 3.57.2 - Server Side XSS to LFR via URL

Priority HIGH 69

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00662 Published 2022-11-25 Fixed in 3.57.3 CWE-79
TI-2020-06306 CVE-2020-7790 · GHSA-rv74-mh27-4jpv

Arbitrary file read in spatie/browsershot

Priority LOW 26

This affects the package spatie/browsershot from 0.0.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01034 Published 2020-12-11 Fixed in 3.40.1 CWE-22