Versions of the package spatie/browsershot from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) in the setUrl() function due to a missing restriction on user input, enabling attackers to access localhost and list all of its directories.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| spatie/browsershot(Packagist) | 0 | N/A | N/A |
CVSS Metrics
