← CVE Intelligence

CVE-2022-43984

Browsershot 3.57.3 - Server Side XSS to LFR via HTML PUBLISHED

Description (CNA)

Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the JS content imported from an external source passed to the Browsershot::html method does not contain URLs that use the file:// protocol.

Affected (CNA)

Vendor / productVersions
n/a / Browsershotaffected 3.57.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.