Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-1647

pyhtml2pdf 0.0.6 - Local File Read via Server Side XSS

Description

Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate the HTML content entered by the user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pyhtml2pdf pyhtml2pdf

Default version status: unaffected

  • 0.0.6affected

References