PT-2022-27053 · Unknown · Browsershot

Carlos Bello · Published 2022-11-25 · Updated 2023-01-10 · CVE-2022-43983

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Browsershot version 3.57.2

Description The issue allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the HTML content passed to the Browsershot::html method does not contain URLs that use the file:// protocol.

Recommendations For Browsershot version 3.57.2, consider validating the HTML content passed to the Browsershot::html method to prevent the inclusion of URLs using the file:// protocol as a temporary workaround until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-43983

GHSA-82H9-V8VH-MFPQ

Affected Products

Browsershot

References · 8

• 🔥 https://fluidattacks.com/advisories/khalid · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-43983 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43983 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-82h9-v8vh-mfpq · Vendor Advisory
• https://github.com/spatie/browsershot · Note
• https://github.com/spatie/browsershot/commit/92cf16fc098211731f80d21687abeafbe2c457ad · Note
• https://t.me/cibsecurity/53525 · Telegram Post
• https://t.me/cvenotify/41737 · Telegram Post