Security Advisory

CVE-2020-7790

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-11 10:50:14
Last updated 2024-09-16 23:11:42
Assigner snyk
State PUBLISHED

Description

This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF.