En resumen
- CVE-2024-1648 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a electron-pdf (fraserxu), electron-pdf.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.69%, mayor que el 53.2% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
electron-pdf version 20.0.0 allows an external attacker to remotely obtain
arbitrary local files. This is possible because the application does not
validate the HTML content entered by the user.
NVD description
electron-pdf version 20.0.0 allows an external attacker to remotely obtain
arbitrary local files. This is possible because the application does not
validate the HTML content entered by the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free