PT-2022-26035 · Unknown · Browsershot

Carlos Bello · Published 2022-11-25 · Updated 2022-12-01 · CVE-2022-41706

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Browsershot version 3.57.2

Description The issue allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the URL protocol passed to the Browsershot::url method.

Recommendations For Browsershot version 3.57.2, consider validating the URL protocol passed to the Browsershot::url method to prevent exploitation. As a temporary workaround, restrict access to the Browsershot::url method until a patch is available.

Exploit

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2022-41706

GHSA-8C2C-JXWJ-JQGF

Affected Products

Browsershot

References · 8

• 🔥 https://fluidattacks.com/advisories/eminem · Exploit
• https://osv.dev/vulnerability/GHSA-8c2c-jxwj-jqgf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-41706 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41706 · Security Note
• https://github.com/spatie/browsershot · Note
• https://github.com/spatie/browsershot/commit/92cf16fc098211731f80d21687abeafbe2c457ad · Note
• https://t.me/cvenotify/38474 · Telegram Post
• https://t.me/cibsecurity/53518 · Telegram Post