CVE-2019-15138

CVE-2019-15138

EPSS 1.9%

The html-pdf package 2.2.0 for Node.js has an arbitrary file read vulnerability via an HTML file that uses XMLHttpRequest to access a file:/// URL.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://security.netapp.com/advisory/ntap-20191017-0005/https://www.npmjs.com/advisories/1095