CVE-2024-21547
Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where the file:// check can be bypassed wit…
Published: 2024-12-18 · CVSS: 8.7 · CVSS 4.0
Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where the file:// check can be bypassed with file:\\. An attacker could read any file on the server by exploiting the normalization of \ into /.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7