PT-2022-27054 · Unknown · Browsershot

Carlos Bello · Published 2022-11-25 · Updated 2023-01-10 · CVE-2022-43984

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Browsershot version 3.57.3

Description The issue allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the JS content imported from an external source passed to the Browsershot::html method does not contain URLs that use the file:// protocol.

Recommendations For Browsershot version 3.57.3, consider validating JS content imported from external sources to prevent the use of file:// protocol URLs in the Browsershot::html method until a patch is available. As a temporary workaround, restrict the use of the Browsershot::html method with external JS content to minimize the risk of exploitation.

Exploit

Fix

XSS

RCE

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2022-43984

GHSA-6Q49-35H6-RQ2P

Affected Products

Browsershot

References · 8

• 🔥 https://fluidattacks.com/advisories/malone · Exploit
• https://osv.dev/vulnerability/CVE-2022-43984 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43984 · Security Note
• https://osv.dev/vulnerability/GHSA-6q49-35h6-rq2p · Vendor Advisory
• https://github.com/spatie/browsershot · Note
• https://github.com/spatie/browsershot/commit/92cf16fc098211731f80d21687abeafbe2c457ad · Note
• https://github.com/spatie/browsershot/commit/554c3e566fde8c47ad1ac9be47eaeb9a84c4dfe2 · Note
• https://t.me/cibsecurity/53519 · Telegram Post