~ / search / GHSA-j2gw-r24m-j2qw

GHSA-j2gw-r24m-j2qw

Browsershot Path Traversal

Source: GitHub Advisory Database (reviewed) High CVE-2025-1022

Packages

EcosystemPackageAffectedFixed in
Packagist spatie/browsershot < 5.0.5 5.0.5

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html(), which can be bypassed by omitting the slashes in the file URI (e.g., file:../../../../etc/passwd). This is due to missing validations of the user input that should be blocking file URI schemes (e.g., file:// and file:/) in the HTML content.

References

External links from the advisory. They lead to third-party sites.