Phantomjs
1 CVEs
product
Monthly
PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Path Traversal
Phantomjs
NVD
CVSS 3.1
7.5
EPSS
3.4%
CVE-2019-17221
npm
EPSS 3%
CVSS 7.5
HIGH
POC
This Week
PhantomJS through 2.1.1 has an arbitrary file read vulnerability, as demonstrated by an XMLHttpRequest for a file:// URI. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Path Traversal
Phantomjs
NVD