Vulnerability CVE-2024-1648
Published: 2024-02-20

Description:
electron-pdf version 20.0.0 allows an external attacker to remotely obtain

arbitrary local files. This is possible because the application does not

validate the HTML content entered by the user.

 References:
https://www.npmjs.com/package/electron-pdf/
https://fluidattacks.com/advisories/drake
Copyright 2026, cxsecurity.com

 

Back to Top