Description
This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path filePath and this is fetched and then sent back to a user. This can be escaped to fetch arbitrary files from a server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | browserless-chrome | before 1.40.2-chrome-stable | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | browserless-chrome | < 1.43.0 | 1.43.0 | GHSA-8p9r-f949-699g |