CVE-2020-7790
on GitHub
Published
Severity
CVSS v3:
N/A
CVSS v2:
5 MEDIUM
Description
This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:spatie:browsershot:*:*:*:*:*:*:*:* | n/a | n/a | * |