CVE-2022-41706: Browsershot 3.57.2 - Server Side XSS to LFR via URL
Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the URL protocol passed to the Browsershot::url method.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/spatie/browsershotto a version that resolves this vulnerability.Fixed in 3.57.3 - Upgrade
Upgrade
Browsershotto a version that resolves this vulnerability.Fixed in 3.57.2 - Configuration
Validate the URL protocol passed to the Browsershot::url method so the application does not accept unvalidated/unsafe protocols that can lead to server-side XSS to LFR.
Browsershot (Browsershot::url) URL protocol validation = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41706?
CVE-2022-41706 is classified as a critical vulnerability due to its ability to allow remote attackers to access arbitrary local files.
How do I fix CVE-2022-41706?
To fix CVE-2022-41706, update Browsershot to version 3.57.3 or later, which includes necessary security validations.
What kind of attack vector is associated with CVE-2022-41706?
CVE-2022-41706 allows remote attackers to exploit the vulnerability through improper URL protocol validation in the Browsershot application.
What software is affected by CVE-2022-41706?
CVE-2022-41706 specifically affects Spatie Browsershot version 3.57.2.
Can CVE-2022-41706 impact my web application?
Yes, if your web application uses Browsershot version 3.57.2, it is at risk of being exploited via CVE-2022-41706.