CVE-2024-28184 — WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PD…
Published: 2024-03-09 · CVSS: 7.4 · CVSS 3.1
WeasyPrint helps web developers to create PDF documents. Since version 61.0, there's a vulnerability which allows attaching content of arbitrary files and URLs to a generated PDF document, even if `url_fetcher` is configured to prevent access to files and URLs. This vulnerability has been patched in version 61.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7