CVE-2022-43983: Browsershot 3.57.2 - Server Side XSS to LFR via HTML
Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the HTML content passed to the Browsershot::html method does not contain URL's that use the file:// protocol.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/spatie/browsershotto a version that resolves this vulnerability.Fixed in 3.57.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.57.2 - Configuration
Update the application code or configuration so that any HTML passed to Browsershot::html is validated to ensure it does not contain URLs using the file:// protocol.
Browsershot (Browsershot::html input validation) Disallow file:// URLs in HTML passed to Browsershot::html = Reject HTML containing file:// protocol URLs
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43983?
The severity of CVE-2022-43983 is classified as high due to the potential for remote file access by attackers.
How do I fix CVE-2022-43983?
To fix CVE-2022-43983, ensure that any HTML content passed to the Browsershot::html method is sanitized and does not include file:// protocol URLs.
What software versions are affected by CVE-2022-43983?
CVE-2022-43983 affects Spatie Browsershot version 3.57.2.
What type of vulnerability is CVE-2022-43983?
CVE-2022-43983 is an arbitrary file access vulnerability due to improper validation of HTML input.
Can CVE-2022-43983 lead to data exposure?
Yes, CVE-2022-43983 can lead to data exposure by allowing attackers to access arbitrary local files on the server.