CVE-2020-21365

State: Published
Severity: Not scored
Published: Aug 15, 2022
Updated: Aug 4, 2024
Reserved: Aug 13, 2020

Description

Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/wkhtmltopdf/wkhtmltopdf/issues/4536
[debian-lts-announce] 20221024 [SECURITY] [DLA 3158-1] wkhtmltopdf security updatemailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.