CVE-2025-1026

Feb. 5, 2025, 5:15 a.m.

8.6
High

Description

Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:** This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).

Product(s) Impacted

Product Versions
spatie/browsershot
  • before 5.0.5

Weaknesses

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://gist.github.com/chuajianshen/6291920112fcf1543fa7b43862112be6
https://gist.github.com/mrdgef/54a8783408220c67c1b859df38a52d65
https://github.com/spatie/browsershot/commit/e3273974506865a24fbb5b65b534d8d4b8dfbf72
https://github.com/spatie/browsershot/pull/908
https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533024

Tags

CWE-20
report@snyk.io
2025-02-05
CVE-2025-1026

CVSS Score

8.6 / 10

CVSS Data

  • Attack Vector: NETWORK
  • Attack Complexity: LOW
  • Privileges Required: NONE
  • Scope: CHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: NONE
  • Availability Impact: NONE
    • View Vector String

    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Date

  • Published: Feb. 5, 2025, 5:15 a.m.
  • Last Modified: Feb. 5, 2025, 5:15 a.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

report@snyk.io

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.