💣Exploit CVE-2024-21547 - Spatie Browsershot Directory Traversal Vulnerability

[Maksim]

CVE ID : CVE-2024-21547
Published : Dec. 18, 2024, 6:15 a.m. | 17 minutes ago
Description : Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalisation in the browser where the file:// check can be bypassed with file:\\. An attacker could read any file on the server by exploiting the normalization of \ into /.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.