CVE-2024-21549
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this by utilizing view-source:file://, allowing arbitrary file reading on a local file. This is a bypass of the fix for CVE-2024-21544.
Risk Assessment
Risk of unauthorized local file reading on the server, potentially leading to disclosure of sensitive data.
Recommendation
Upgrade the spatie/browsershot package to version 5.0.3 or later, which fixes this vulnerability.
Other vulnerabilities in spatie/browsershot
See all- CVE-2024-21547High
Versions of the package spatie/browsershot before 5.0.2 are vulnerable to Directory Traversal due to URI normalization in the browser, allowing the file:// check to be bypassed with file:\. An attacker could read any file on the server.
- CVE-2025-1022High
The spatie/browsershot package before version 5.0.5 is vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html(). Attackers can bypass file URI scheme blocking (e.g., file:// and file:/) by omitting slashes, e.g., file:../../../../etc/passwd, leading to arbitrary file read.
Original NVD description (English source)
Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by utilizing view-source:file://, which allows for arbitrary file reading on a local file. **Note:** This is a bypass of the fix for [CVE-2024-21544](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8496745).