← CVE Intelligence

CVE-2022-43983

Browsershot 3.57.2 - Server Side XSS to LFR via HTML PUBLISHED

Description (CNA)

Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the HTML content passed to the Browsershot::html method does not contain URL's that use the file:// protocol.

Affected (CNA)

Vendor / productVersions
n/a / Browsershotaffected 3.57.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.