Lucene search

K
osvGoogleOSV:CVE-2020-7758
HistoryNov 02, 2020 - 10:15 p.m.

CVE-2020-7758

2020-11-0222:15:13
Google
osv.dev
8
cve-2020-7758
file path manipulation
arbitrary file access
security vulnerability
software vulnerability

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

53.2%

This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

53.2%

Related for OSV:CVE-2020-7758