CVE-2022-43984: Browsershot 3.57.3 - Server Side XSS to LFR via HTML
Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the JS content imported from an external source passed to the Browsershot::html method does not contain URLs that use the file:// protocol.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/spatie/browsershotto a version that resolves this vulnerability.Fixed in 3.57.4 - Upgrade
Upgrade
browsershotto a version that resolves this vulnerability.Fixed in 3.57.3 - Configuration
Update the application logic that calls Browsershot::html so it validates the imported JS content and blocks any URLs using the file:// protocol.
Browsershot::html Prevent file:// protocol in imported JS content = Disallow file:// URLs in the JS content passed to Browsershot::html
Event History
Frequently Asked Questions
What is the severity of CVE-2022-43984?
CVE-2022-43984 has a critical severity rating due to the potential for remote file access by attackers.
How do I fix CVE-2022-43984?
To fix CVE-2022-43984, upgrade to a version of Browsershot that includes validation for the imported JS content.
What software is affected by CVE-2022-43984?
CVE-2022-43984 affects Spatie Browsershot version 3.57.3.
Can CVE-2022-43984 be exploited remotely?
Yes, CVE-2022-43984 can be exploited by external attackers to access local files remotely.
What type of files can an attacker access through CVE-2022-43984?
An attacker can potentially access arbitrary local files due to insufficient validation in the Browsershot application.