CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2024-1647
High (7.5) in kumaf pyhtml2pdf. EPSS 0.7% chance of exploitation in the next 30 days.
Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain
arbitrary local files. This is possible because the application does not
validate the HTML content entered by the user.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kumaf:pyhtml2pdf
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-p3rv-qj56-2fqx | PyPI | pyhtml2pdf | <=0.0.6 | no fix published |
| PYSEC-2024-301 | PyPI | pyhtml2pdf | <=0.0.6 | no fix published |