https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:26:40.372469+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-43984 CVE-2022-43984 — Browsershot 3.57.3 - Server Side XSS to LFR via HTML 2026-10-05T22:26:40.393257+00:00

Affected: Browsershot

Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application does not validate that the JS content imported from an external source passed to the Browsershot::html method does not contain URLs that use the file:// protocol.