Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:** This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact total

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://gist.github.com/chuajianshen/6291920112fcf1543fa7b43862112be6 cve-icon cve-icon
https://gist.github.com/mrdgef/54a8783408220c67c1b859df38a52d65 cve-icon cve-icon
https://github.com/spatie/browsershot/commit/e3273974506865a24fbb5b65b534d8d4b8dfbf72 cve-icon cve-icon
https://github.com/spatie/browsershot/pull/908 cve-icon cve-icon
https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533024 cve-icon cve-icon
History

Wed, 12 Feb 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 05 Feb 2025 05:15:00 +0000

Type Values Removed Values Added
Description Versions of the package spatie/browsershot before 5.0.5 are vulnerable to Improper Input Validation due to improper URL validation through the setUrl method, which results in a Local File Inclusion allowing the attacker to read sensitive files. **Note:** This is a bypass of the fix for [CVE-2024-21549](https://security.snyk.io/vuln/SNYK-PHP-SPATIEBROWSERSHOT-8533023).
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P'}

cvssV4_0

{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:P'}
cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published:

Updated: 2025-02-12T20:51:31.059Z

Reserved: 2025-02-04T13:38:43.390Z

Link: CVE-2025-1026

cve-icon Vulnrichment

Updated: 2025-02-12T20:43:21.180Z

cve-icon NVD

Status : Received

Published: 2025-02-05T05:15:10.687

Modified: 2025-02-05T05:15:10.687

Link: CVE-2025-1026

cve-icon Redhat

No data.