PT-2024-27353 · Playright+1 · Playright+1

Timoxoszt · Published 2024-06-05 · Updated 2024-06-11 · CVE-2024-37169

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions @jmondi/url-to-png versions prior to 2.0.3

Description The issue allows for arbitrary file read if a threat actor uses Playright's screenshot feature to exploit the file wrapper. No known workarounds are available aside from upgrading. The utility requires input URLs to be of protocol http or https to mitigate this issue.

Recommendations For versions prior to 2.0.3, upgrade to version 2.0.3 or later, which requires input URLs to be of protocol http or https, to resolve the issue. As a temporary workaround, consider restricting the use of the Playright's screenshot feature until the upgrade is applied.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-37169

GHSA-665W-MWRR-77Q3

Affected Products

@Jmondi/Url-To-Png

Playright

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37169.json · Exploit
• 🔥 https://github.com/user-attachments/files/15536336/Arbitrary.File.Read.via.Playwright.s.Screenshot.Feature.Exploiting.File.Wrapper.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-37169 · Security Note
• https://osv.dev/vulnerability/GHSA-665w-mwrr-77q3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-37169 · Vendor Advisory
• https://github.com/jasonraimondi/url-to-png/releases/tag/v2.0.3 · Note
• https://github.com/jasonraimondi/url-to-png/security/advisories/GHSA-665w-mwrr-77q3 · Note
• https://github.com/jasonraimondi/url-to-png/issues/47 · Note
• https://github.com/jasonraimondi/url-to-png/commit/9336020c5e603323f5cf4a2ac3bb9a7735cf61f7 · Note
• https://github.com/jasonraimondi/url-to-png · Note
• https://twitter.com/CVEnew/status/1800290526706762130 · Twitter Post