In short
- CVE-2020-7790 is a MEDIUM (CVSS 5.3) vulnerability affecting spatie/browsershot.
- Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.0% of all vulnerabilities.
- Fix: update to 3.40.1 or later.
Description
This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
NVD description
This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
More vulnerabilities in spatie/browsershot
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free