Vulnerabilities > CVE-2019-15138 - Exposure of Resource to Wrong Sphere vulnerability in Html-Pdf Project Html-Pdf

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
html-pdf-project
CWE-668
NVD
Published: 2019-09-20
Updated: 2024-11-21

Summary

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.

Vulnerable Configurations

Part Description Count
Application
Html-Pdf_Project
22

Common Weakness Enumeration (CWE)

References