CVE-2024-36527

puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal

Medium · published June 17, 2024

CVSS v3.1
6.5
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02559 · 85.0th percentile
Published
2024-06-17T00:00Z
EPSS history
Timeline
  • 17 JUN 00:00Z
    puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal
    cvelistv5